CVE-2025-26269: Dragonflydb Dragonfly

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.

Affected products

• Dragonflydb Dragonfly: before 1.29.0 (fixed in 1.29.0)

Published 2025-04-17. Last modified 2026-06-17.