A stack overflow vulnerability in the FalkorDB Redis module allows unauthenticated remote attackers to trigger a Denial of Service condition.

The vulnerability is a stack overflow located within the _ValidateUnion_Clauses function in the /ast/ast_validations.c source file. An unauthenticated attacker can trigger this flaw by sending a specifically crafted input to the affected module.

The successful exploitation of this vulnerability results in a Denial of Service, which can render the database module unresponsive and disrupt dependent applications. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to service availability, particularly for production environments relying on FalkorDB for real-time data processing.

Immediate Action: Monitor the official FalkorDB GitHub repository for the release of a security patch and apply it as soon as it becomes available.

Proactive Monitoring: Review application logs and Redis module telemetry for abnormal crashes or memory usage spikes that may indicate attempts to trigger the stack overflow.

Compensating Controls: Ensure that access to the Redis instance is restricted via network-level controls, such as firewalls or VPC security groups, to limit the exposure of the module to untrusted traffic.

Public Exploit Available: No (exploit_available: false)

This vulnerability presents a clear risk to service uptime. Administrators should prioritize identifying instances of FalkorDB running the affected versions and implement strict network access controls immediately. Once the vendor releases the necessary security update, it should be deployed as part of an emergency maintenance cycle to ensure system stability.