VULNERABILITY INTELLIGENCE

CVE-2025-26269

CVSS score5.5 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-04-17

Last modified2026-06-17

Description

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.