Valkey 8.0.6 → 9.1.1
28 releases · 1 breaking change · 44 security fixes · 5 advisories fixed
44security1breaking0deprecated42feature315fix
Vulnerabilities fixed by this upgrade
- 8.8 CVE-2026-63639 UAF in stream deserialization may lead to remote code execution
- 7.5 CVE-2026-56684 UAF in Valkey with TLS may lead to remote code execution
- 7.5 CVE-2026-27623 Pre-Authentication DOS from malformed RESP request
- 6.5 CVE-2026-21863 Remote DoS with malformed Valkey Cluster bus message
- 8.5 CVE-2025-67733 RESP Protocol Injection via Lua error_reply
Breaking changes
- breaking Remove Valkey specific changes in jemalloc source code (#1266) in 8.1.0
Security changes
- security CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) in 9.1.1
- security CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073) in 9.1.1
- security (CVE-2026-23479) Use-After-Free in unblock client flow in 9.1.0
- security (CVE-2026-25243) Invalid Memory Access in RESTORE command in 9.1.0
- security (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution in 9.1.0
- security GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) in 9.0.7
- security GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534) in 9.0.6
- security CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) in 9.0.5
- security CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073) in 9.0.5
- security (CVE-2026-23479) Use-After-Free in unblock client flow in 9.0.4
- security (CVE-2026-25243) Invalid Memory Access in RESTORE command in 9.0.4
- security (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution in 9.0.4
- security (CVE-2025-67733) RESP Protocol Injection via Lua error_reply in 9.0.3
- security (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message in 9.0.3
- security (CVE-2026-27623) Reset request type after handling empty requests in 9.0.3
- security Fixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply in 9.0.2
- security Fixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply in 9.0.0
- security Fixes CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message in 9.0.0
- security GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) in 8.1.11
- security GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534) in 8.1.10
- security CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) in 8.1.9
- security CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073) in 8.1.9
- security (CVE-2026-23479) Use-After-Free in unblock client flow in 8.1.7
- security (CVE-2026-25243) Invalid Memory Access in RESTORE command in 8.1.7
- security (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution in 8.1.7
- security (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message in 8.1.6
- security (CVE-2025-67733) RESP Protocol Injection via Lua error_reply in 8.1.6
- security (CVE-2025-49844) A Lua script may lead to remote code execution in 8.1.4
- security (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE in 8.1.4
- security (CVE-2025-46818) A Lua script can be executed in the context of another user in 8.1.4
- security (CVE-2025-46819) LUA out-of-bound read in 8.1.4
- security CVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146) in 8.1.3
- security CVE-2025-48367 retry accept on transient errors (#2315) in 8.1.3
- security CVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146) in 8.1.2
- security (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1994) in 8.1.1
- security GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) in 8.0.12
- security GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534) in 8.0.11
- security CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to crash the server using CLIENT KILL (#4234) in 8.0.10
- security CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers. Reported by @z0v3r1n and @lifip. (#4073) in 8.0.10
- security (CVE-2026-23479) Use-After-Free in unblock client flow in 8.0.9
- security (CVE-2026-25243) Invalid Memory Access in RESTORE command in 8.0.9
- security (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution in 8.0.9
- security (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message in 8.0.7
- security (CVE-2025-67733) RESP Protocol Injection via Lua error_reply in 8.0.7
Every release in between
securityCVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234)
securityCVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073)
fixOmit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and CONFIG REWRITE so older versions can parse the output by @dvkashapov (#3964)
fixImprove throughput when IO threads are enabled by offloading object deallocation from the main thread by @roshkhatri (#3938)
fixFix use-after-free crash when ACL LOAD removes a user whose authenticated client has its close deferred by @ranshid (#3800)
fixEnforce db= ACL permissions on every DB clause of COPY, closing a bypass with REPLACE or repeated DB tokens by @enjoy-binbin (#3801)
fixEnforce database-level ACLs for CLUSTER FLUSHSLOT, which removes keys from all databases by @enjoy-binbin (#3806)
fixFix use-after-free in the module API when unregistering the first registered cluster message receiver by @eifrah-aws (#3846)
fixFix HRANDFIELD with a positive count looping forever when non-expired fields are fewer than the requested count by @cjx-zar (#4047)
fixFix clients left on the wrong database after module keyspace notifications for MOVE and COPY by @enjoy-binbin (#4024)
fixFix Sentinel crash during coordinated failover when the command link to the old primary disconnects by @lukepalmer (#4068)
fixFix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by @ranshid (#3950)
fixFix assertion in HEXPIRE, HGETDEL and HPERSIST when a module blocks the client in a keyspace notification callback by @enjoy-binbin (#3743)
fixFix undefined behavior in the failover delay calculation when cluster-node-timeout is below 30 milliseconds by @enjoy-binbin (#3941)
fixReject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @madolson (#3920)
fixReject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by @madolson (#3921)
fixFix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by @nanyan0312 (#4060)
fixFix startup crash on 32-bit systems where time_t is 64-bit (such as Alpine 3.23) when generating INFO output by @chenshi5012 (#3787)
fixHGETDEL now returns a syntax error when the FIELDS keyword is missing or misplaced by @lcxn123 (#4049)
fixCOMMAND INFO in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by @rickrams (#3939)
fixSend the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by @hpatro (#4105)
fixFix duplicate failure handling and an invalid reply sequence in cluster slot migration by @chx9 (#3723)
fixReject control characters in SENTINEL SET values to prevent config-file injection via Sentinel config rewrite by @eifrah-aws (#3847)
fixReject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf injection by @eifrah-aws (#3848)
fixRedact key names and user data from more server log messages when hide-user-data-from-log is enabled by @zackcam (#3872)
fixACL LOG now reports the denied database ID for COPY instead of the command name when db= access is denied by @enjoy-binbin (#3888)
fixFix garbled shard IDs in the cluster UPDATE message log line by @enjoy-binbin (#3942)
fixFix negative master_sync_total_bytes in INFO replication during disk-based sync when the RDB exceeds 2GB by @chx9 (#3811)
fixIncrease the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @pkhartsk (#3843)
security(CVE-2026-23479) Use-After-Free in unblock client flow
security(CVE-2026-25243) Invalid Memory Access in RESTORE command
security(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
featureAdd cluster bus network traffic usage metric in bytes by @hpatro (#3396)
featureReduce latency spikes during rehashing via incremental page release by @chzhoo (#3481)
fixFix(syncio): Set errno on EOF in syncRead and propagate to conn->last by @abmathur-ie (#3580)
fixFix GEOSEARCH BYPOLYGON leak on invalid COUNT by @bandalgomsu (#3568)
fixHandle NULL pointer in streamTrim listpack delta calculation by @smkher (#3591)
fixFixes server crash when RDMA benchmark clients disconnect by @quanyeyang (#3448)
fixFix the memory leak in valkey-benchmark by @nmvk (#3643)
securityGHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030)
fixFix stream commands that mutate consumer-group or PEL state (XGROUP, XSETID, XREADGROUP, XACK, XCLAIM, XAUTOCLAIM) not triggering WATCH and client-side tracking invalidation by @Tarte12 (#3459)
fixReject module write commands while the server is paused for writes, preventing a crash from module timer callbacks during CLIENT PAUSE WRITE or CLUSTER FAILOVER by @smkher (#3645)
fixFix a server abort on a RESTORE payload declaring a string length that overflows the allocation size; such payloads are now rejected as bad data by @enjoy-binbin (#4733)
fixFix ZINTER/ZINTERSTORE returning input-order-dependent scores when a weighted term is 0*inf; a NaN weighted score now counts as 0, matching ZUNION by @leomurillo (#4997)
fixCorrect ValkeyModule_FreeModuleUser, ValkeyModule_ACLAddLogEntry and ValkeyModule_ACLAddLogEntryByUserName declarations to return int as implemented, fixing undefined behavior on targets with strict call signature checks by @rainsupreme (#4676)
fixvalkey-check-aof now recognizes RDB base files with the VALKEY signature instead of misreporting a valid multipart AOF as invalid by @sarthakaggarwal97 (#4739)
fixFix a huge memory allocation when a command such as COMMAND GETKEYS EVAL declares a far larger key count than the arguments provided by @murphyjacob4 (#3598)
fixReject relative expire times in SET/GETEX, RESTORE, and ValkeyModule_SetExpire that overflow when added to the current time, preventing server aborts from negative expires by @madolson (#4880)
fixHDEL, HGETDEL, HPERSIST, and HEXPIRE no longer propagate fields they treat as expired, preventing replica and AOF-reload divergence by @xdk-amz (#4772)
fixFix a server crash when loading an ACL file containing a selector with an unmatched parenthesis by @magic-peach (#4214)
fixCOPY of a hash now includes expired-but-unreaped fields so their deletion is propagated and replicas stay in sync by @pirate329 (#4939)
fixSorted set range commands with a negative LIMIT offset now return an empty result instead of a spurious element on btree-encoded keys by @xiaocj (#4637)
fixFix atomic slot migration not replicating evictions on the import target, which let replicas grow far past maxmemory by @shanezx-sc (#4920)
fixRedact error text in server logs when hide-user-data-from-log is enabled, so command arguments no longer leak into logs by @zackcam (#4815)
fixFix HSETEX and HGETEX failing to parse their arguments when the key is named fields by @sebxt (#4945)
fixFix cluster config saving to avoid publishing truncated nodes.conf files, losing the startup lock after the first save, and failing every save on SMB filesystems such as Azure Files; the lock now lives on a separate nodes.conf.lock file by @KewangZhili (#4489)
fixFix atomic slot migration with cluster-databases > 1 applying writes made during the snapshot to the wrong database on the target by @pirate329 (#4952)
fixFix LSET on 64-bit builds silently modifying the wrong element for out-of-range indexes instead of returning an index out of range error by @charsyam (#4823)
securityGHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534)
fixFix crashes, assertion failures, and hangs when using RDMA together with IO threads by @quanyeyang (#3335)
fixFix a double free when a module timer callback stops its own timer with ValkeyModule_StopTimer by @quanyeyang (#4211)
fixFix torn RESP3 push frames when a client publishes a large message to a channel it is also subscribed to by @quanyeyang (#4253)
fixRESET now clears CLIENT IMPORT-SOURCE state so reused pooled connections regain normal key expiration semantics by @tjade273 (#3973)
fixTruncated AOF files now discard an incomplete MULTI block entirely, preventing loss of later writes after another restart by @chzhoo (#4342)
fixFix an ACL bypass in GEORADIUS and GEORADIUSBYMEMBER where duplicate STORE options checked only the first destination key by @tjade273 (#3971)
fixFix a use-after-free crash when a cluster message arrives for a message type registered by an unloaded module by @enjoy-binbin (#4360)
fixAlways deep-validate payloads on RDB load and RESTORE, preventing deferred assertion crashes; sanitize-dump-payload is now a deprecated no-op by @jjuleslasarte (#3721)
fixFix out-of-bounds memory access when registering or receiving cluster module messages of type 255, which is now a valid type by @enjoy-binbin (#4410)
fixAOF loading no longer applies ACL checks, preventing silent data loss when replaying commands with a disabled default user by @lukepalmer (#3984)
fixFix a client memory accounting leak that inflated the mem_clients_normal INFO field on replicas after primary disconnects by @enjoy-binbin (#4395)
fixFix a permanent client hang when a blocking command such as BLPOP is pipelined with a partially received next command by @foobar (#4531)
fixHGETEX now requires write permission on the key, so read-only ACL users can no longer change field TTLs or delete fields by @ranshid (#4576)
fixCompare the full TLS certificate CN when authenticating, so an embedded NUL cannot impersonate a truncated ACL username by @madolson (#4577)
fixRestore read performance with IO threads on TCP/TLS by applying extra read-completion handling only to RDMA connections by @quanyeyang (#4414)
fixRestore write performance with IO threads on TCP/TLS by limiting post-write safety checks to RDMA connections by @quanyeyang (#4452)
fixFix atomic slot migration protocol errors with IO threads by not offloading export connection writes while snapshotting by @satheeshaGowda (#4104)
fixReject invalid slot import ranges when loading an RDB, preventing corrupted files from creating bad migration state by @enjoy-binbin (#4229)
fixReject RDB slot-import records with an invalid job name length, fixing an out-of-bounds read during startup by @quanyeyang (#4210)
fixFix a crash when COPY ends with a bare DB token during slot migration, and block cross-DB COPY regardless of option order by @madolson (#4301)
fixHPERSIST, HTTL, HPTTL, HEXPIRETIME, and HPEXPIRETIME now return a syntax error when the FIELDS keyword is missing by @cjx-zar (#4300)
fixFix a TLS and IO threads race that could leave slot migration export jobs stuck until timeout by @jjuleslasarte (#4320)
fixFix a server crash when hash field expirations are set near the maximum timestamp, for example via HPEXPIREAT by @ranshid (#4312)
fixFix a stack overflow crash on TLS connections when retrying a failed write of large replies by @murphyjacob4 (#4307)
fixValidate cluster bus PUBLISH and MODULE packet payload lengths, preventing a remote crash from forged length fields by @tjade273 (#3972)
fixFix a use-after-free crash when serving blocked clients if handling one client frees another blocked on the same key by @quanyeyang (#4212)
fixFix a server panic with IO threads when pipelined commands with a wrong number of arguments reached the key prefetcher by @madolson (#4302)
fixReject crafted stream RESTORE and RDB payloads with inconsistent lengths or negative field counts that could crash the server by @madolson (#3922)
fixReject stream payloads with mismatched live and deleted entry counts that could make XDEL destroy live entries by @roshkhatri (#4381)
fixFix CLUSTER SLOT-STATS ORDERBY returning wrong ordering once cumulative slot counters differ by more than 2^31 by @jzy1688 (#4459)
fixFix atomic slot migration failures with TLS and IO threads by not offloading export connection reads while snapshotting by @satheeshaGowda (#4559)
securityCVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234)
securityCVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073)
fixStrictly validate CRLF terminators when parsing the RESP protocol; malformed requests now get a protocol error instead of being misparsed by @enjoy-binbin (#2872)
fixFix a use-after-free crash when creating slot import jobs during manual slot migrations by @twooster (#3283)
fixFix a memory leak in ZDIFF and ZDIFFSTORE when the result set becomes empty before all inputs are processed by @sarthakaggarwal97 (#3342)
fixFix HPERSIST sending a malformed reply that desynchronized the connection when used on a key of the wrong type by @madolson (#3516)
fixFix a crash from a race between IO threads and asynchronous client freeing by @deepakrn (#3458)
fixFix a double free when loading a stream with corrupt consumer PEL data from RDB or RESTORE by @enjoy-binbin (#3498)
fixFix listpack corruption and a subsequent crash when XTRIM marks the last entry of a stream listpack node as deleted by @smkher (#3591)
fixFix malformed replies when module callbacks build deferred-length arrays while a client's deferred reply buffer is active by @eifrah-aws (#3578)
fixFix a NULL pointer crash in TLS pending-data handling by @zuiderkwast (#3641)
fixFix a server crash when multiple RDMA clients disconnect at the same time by @quanyeyang (#3448)
fixFix a use-after-free when ACL LOAD deletes a user whose clients cannot be freed immediately by @ranshid (#3800)
fixFix a use-after-free when a module unregisters the first registered cluster message receiver for a message type by @eifrah-aws (#3846)
fixFix HRANDFIELD looping forever when a hash has fewer non-expired fields than the requested count by @cjx-zar (#4047)
fixFix clients being left on the wrong database after module keyspace notifications for commands like MOVE and COPY by @enjoy-binbin (#4024)
fixFix a Sentinel crash during coordinated failover when the connection to the old primary is disconnected by @lukepalmer (#4068)
fixFix underestimation of client output buffer memory when replies reference shared objects, so buffer limits are enforced correctly by @dvkashapov (#3306)
fixFix a crash on ARM/aarch64 caused by memory-ordering races in the IO thread job queue by @jjuleslasarte (#3878)
fixFix a crash when active hash field expiration leaves a single entry in a large expiration time-bucket by @ranshid (#3950)
fixFix a file descriptor leak when a blocking connection attempt, such as MIGRATE to an unreachable host, times out by @madolson (#3541)
fixFix a potential crash from a dangling slot migration job reference when the migration client is reset by @murphyjacob4 (#3554)
fixRemove cached EVAL scripts when their scripting engine is unregistered, preventing dangling engine references by @eifrah-aws (#3503)
fixFix a memory leak in GEOSEARCH BYPOLYGON when argument parsing fails, such as on an invalid COUNT by @bandalgomsu (#3568)
fixFix a crash when a slot migration target node is removed from the cluster before the migration connects by @chenshi5012 (#3596)
fixFix a crash when the module GetLRU/SetLRU/GetLFU/SetLFU APIs are called with a NULL key by @yaronsananes (#3610)
fixFix an assertion failure in hash field expiration commands when a module blocks the client in a keyspace notification by @enjoy-binbin (#3743)
fixFix a cluster UPDATE log message reading shard IDs past their fixed-length buffer by @enjoy-binbin (#3942)
fixFix undefined behavior in the failover delay calculation when cluster-node-timeout is set below 30 milliseconds by @enjoy-binbin (#3941)
fixReject zipmap RESTORE payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @madolson (#3920)
fixReject NAN scores in listpack- and ziplist-encoded sorted sets on RDB/RESTORE load, preventing a later crash on skiplist conversion by @madolson (#3921)
fixFix a startup crash on 32-bit systems with 64-bit time_t, such as Alpine 3.23, caused by time value formatting mismatches by @chenshi5012 (#3787)
fixFix corrupted client replies when IO threads are enabled, caused by a race between in-flight writes and reply buffer reuse by @nanyan0312 (#4060)
fixCOMMAND INFO in RESP3 now returns the subcommands field as an Array instead of a Set for commands without subcommands by @rickrams (#3939)
fixThe dual-channel replication RDB connection now announces the configured replica-announce-ip, avoiding stale replica entries behind NAT by @jdheyburn (#2846)
fixPrevent replicas from processing stale cluster packets and incorrectly promoting themselves to an empty primary within a shard by @zhijun42 (#2811)
fixSend the replica version on the dual-channel RDB connection so full syncs of data like hash field TTLs no longer fail by @hpatro (#4105)
fixFix slot migration failure handling running twice on ownership changes and an out-of-order error reply in the internal SYNCSLOTS FINISH command by @chx9 (#3723)
fixAllow slot-migration-max-failover-repl-bytes to be set to -1 to disable the limit, as documented by @enjoy-binbin (#3443)
fixFix CONFIG REWRITE producing negative values for memory configs such as maxmemory when set to very large values by @enjoy-binbin (#3440)
+11 more items in the release notessecurity(CVE-2026-23479) Use-After-Free in unblock client flow
security(CVE-2026-25243) Invalid Memory Access in RESTORE command
security(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
security(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
security(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
security(CVE-2026-27623) Reset request type after handling empty requests
fixAvoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#3160)
fixFix server assert on ACL LOAD when current user loses permission to channels (#3182)
fixFix bug causing no response flush sometimes when IO threads are busy (#3205)
securityFixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply
fixAvoid memory leak of new argv when HEXPIRE commands target only non-exiting fields (#2973)
fixFix HINCRBY and HINCRBYFLOAT to update volatile key tracking (#2974)
fixAvoid empty hash object when HSETEX added no fields (#2998)
fixFix case-sensitive check for the FNX and FXX arguments in HSETEX (#3000)
fixPrevent assertion in active expiration job after a hash with volatile fields is overwritten (#3003, #3007)
fixFix HRANDFIELD to return null response when no field could be found (#3022)
fixFix HEXPIRE to not delete items when validation rules fail and expiration is in the past (#3023, #3048)
fixFix how hash is handling overriding of expired fields overwrite (#3060)
fixHSETEX - Always issue keyspace notifications after validation (#3001)
fixMake zero a valid TTL for hash fields during import mode and data loading (#3006)
fixTrigger prepareCommand on argc change in module command filters (#2945)
fixRestrict TTL from being negative and avoid crash in import-mode (#2944)
fixFix chained replica crash when doing dual channel replication (#2983)
fixSkip slot cache optimization for AOF client to prevent key duplication and data corruption (#3004)
fixFix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
fixAvoid duplicate calculations of network-bytes-out in slot stats with copy-avoidance (#3046)
fixFix XREAD returning error on empty stream with + ID (#2742)
featureTrack reply bytes in I/O threads if commandlog-reply-larger-than is -1 (#3086, #3126). This makes it possible to mitigate a performance regression in 9.0.1 caused by the bug fix #2652.
fixAuthenticate slot migration client on source node to internal user (#2785)
fixBug fix: reset io_last_written on c->buf resize to prevent stale pointers (#2786)
fixSentinel: fix regression requiring "+failover" ACL in failover path (#2780)
fixCluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#2817)
fixSend duplicate multi meet packet only for node which supports it in mixed clusters (#2840)
fixFix: LTRIM should not call signalModifiedKey when no elements are removed (#2787)
fixFix build on some 32-bit ARM by only using NEON on AArch64 (#2873)
fixFix deadlock in IO-thread shutdown during panic (#2898)
fixFix COMMANDLOG large-reply when using reply copy avoidance (#2652)
fixFix CLUSTER SLOTS crash when called from module timer callback (#2915)
securityFixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply
securityFixes CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message
fixHSETEX with FXX should not create an object if it does not exist (#2716)
fixFix crash when aborting a slot migration while child snapshot is active (#2721)
fixFix double MOVED reply on unblock at failover (#2734)
fixFix memory leak with CLIENT LIST/KILL duplicate filters (#2362)
fixFix incorrect accounting after completed atomic slot migration (#2749)
fixFix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826, #2750)
fixFix invalid memory address caused by hashtable shrinking during safe iteration (#2753)
securityGHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030)
fixFix stream commands that mutate consumer-group or PEL state (XGROUP, XSETID, XREADGROUP, XACK, XCLAIM, XAUTOCLAIM) not triggering WATCH and client-side tracking invalidation by @Tarte12 (#3459)
fixFix a server crash when module timer callbacks or thread-safe contexts attempt writes while writes are paused by CLIENT PAUSE WRITE or CLUSTER FAILOVER; such module writes are now rejected by @smkher (#3645)
fixFix a server abort on a RESTORE payload declaring a string length that overflows the allocation size; such payloads are now rejected as bad data by @enjoy-binbin (#4733)
fixFix ZINTER/ZINTERSTORE returning input-order-dependent scores when a weighted term is 0*inf; a NaN weighted score now counts as 0, matching ZUNION by @leomurillo (#4997)
fixCorrect ValkeyModule_FreeModuleUser, ValkeyModule_ACLAddLogEntry and ValkeyModule_ACLAddLogEntryByUserName declarations to return int as implemented, fixing undefined behavior on targets with strict call signature checks by @rainsupreme (#4676)
fixFix a huge memory allocation when a command such as COMMAND GETKEYS EVAL declares a far larger key count than the arguments provided by @murphyjacob4 (#3598)
fixReject relative expire times in SET/GETEX, RESTORE, and the module SetExpire API that overflow when the current time is added, preventing negative expires that abort the server by @madolson (#4880)
fixFix a server crash when loading an ACL file containing a selector with an unmatched parenthesis by @magic-peach (#4214)
fixFix sorted set range commands with a negative LIMIT offset returning a wrong element on btree-encoded keys; negative offsets now return an empty result in both encodings by @xiaocj (#4637)
fixRedact error reply text in server logs when hide-user-data-from-log is enabled, so keys and values no longer leak into logs via error messages by @zackcam (#4815)
fixFix cluster config saving to avoid publishing truncated nodes.conf files, losing the startup lock after the first save, and failing every save on SMB filesystems such as Azure Files; the lock now lives on a separate nodes.conf.lock file by @KewangZhili (#4489)
fixFix LSET on 64-bit builds silently modifying the wrong element for out-of-range indexes instead of returning an index out of range error by @charsyam (#4823)
securityGHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534)
fixFix a double free when a module timer callback stops its own timer with ValkeyModule_StopTimer by @quanyeyang (#4211)
fixRESET now clears the CLIENT IMPORT-SOURCE flag so reused pooled connections stop reading logically expired keys by @tjade273 (#3973)
fixFix AOF recovery of a truncated MULTI/EXEC block that could cause new writes to be lost after a subsequent restart by @chzhoo (#4342)
fixFix an ACL bypass where duplicate STORE/STOREDIST options in GEORADIUS commands escaped key write permission checks by @tjade273 (#3971)
fixFix a use-after-free crash when a cluster message of a module-registered type arrives after the module is unloaded by @enjoy-binbin (#4360)
fixFix out-of-bounds access when registering or receiving cluster module messages of type 255, which is now fully supported by @enjoy-binbin (#4410)
fixSkip ACL permission checks when replaying the AOF, preventing silent data loss when users are restricted or disabled by @lukepalmer (#3984)
fixFix a client memory accounting leak that inflated mem_clients_normal on replicas after disconnecting from the primary by @enjoy-binbin (#4395)
fixAlways validate listpacks on RDB load and RESTORE to prevent deferred crashes; sanitize-dump-payload and the related ACL flags are now deprecated no-ops by @jjuleslasarte (#3721)
fixFix a stack overflow crash when retrying large TLS writes after an OpenSSL write error by @murphyjacob4 (#4307)
fixValidate PUBLISH and MODULE cluster bus packet lengths, preventing a crash from forged packets with oversized payload lengths by @tjade273 (#3972)
fixReject crafted stream RESTORE/RDB payloads with inconsistent lengths or negative field counts that could crash the server by @madolson (#3922)
fixFix a use-after-free crash when serving multiple clients blocked on the same key if one is freed during processing by @quanyeyang (#4212)
fixFix CLUSTER SLOT-STATS ORDERBY sorting when slot statistics differ by more than 2^31 by @jzy1688 (#4459)
securityCVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234)
securityCVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @z0v3r1n and @lifip. (#4073)
fixFix clients being left on the wrong database after module keyspace notifications from commands like MOVE and COPY by @enjoy-binbin (#4024)
fixFix an I/O thread job queue memory-ordering race that could trigger an assertion crash on ARM/aarch64 by @jjuleslasarte (#3878)
fixReject zipmap RESTORE payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @madolson (#3920)
fixReject NAN scores when loading listpack/ziplist-encoded sorted sets, preventing a crash from crafted RESTORE payloads by @madolson (#3921)
fixFix a startup crash when generating INFO output on 32-bit systems where time_t is 64-bit (e.g. Alpine time64) by @chenshi5012 (#3787)
fixFix COMMAND INFO in RESP3 to reply with an empty Array instead of a Set for commands without subcommands by @rickrams (#3939)
fixReject invalid characters in cluster AUX fields and cluster-announce-ip to prevent nodes.conf corruption and injection by @eifrah-aws (#3848)
fixFix lua-enable-insecure-api having no effect when enabled at startup via config file or command line by @enjoy-binbin (#3548)
fixIncrease the maximum process title length from 255 to 1024 characters to avoid truncation with long installation paths by @pkhartsk (#3843)
fixFix ZDIFF algorithm 2 memory leak on early exit (#3342)
fixStrictly check CRLF when parsing querybuf (#2872)
fixFix incorrect memory overhead calculation for watched keys (#3359)
fixFix valkey-cli --cluster del-node for unreachable nodes (#3209)
fixFix race condition during async client freeing with IO threading enabled (#3458)
fixFix double free in stream consumer PEL loading with corrupt RDB data (#3498)
fixFixes server crash when RDMA benchmark clients disconnect (#3448)
fixFix misleading log "I/O error reading bulk count from PRIMARY: Success" (#3580)
fixHandle NULL pointer in streamTrim listpack delta calculation (#3591)
fixFix Deferred Reply Placeholders in Active Deferred Buffers (#3578)
fixAdd NULL check in updateSSLPendingFlag (#3641)
fixFix heap-use-after-free in ACL LOAD when client free is deferred (#3800)
fixRedacting customer information when hide_user_data_from_log is true in rdb.c, networking.c, debug.c and t_hash (#3872)
fixFix use-after-free in VM_RegisterClusterMessageReceiver (#3846)
fixHarden SENTINEL commands and config rewrite against control-character injection (#3847)
fixFix CLUSTER SLOTS crash when called from module timer callback (#2915)
security(CVE-2026-23479) Use-After-Free in unblock client flow
security(CVE-2026-25243) Invalid Memory Access in RESTORE command
security(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
security(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
security(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
fixRestrict ttl from being negative and avoid crash in import-mode (#2944)
fixFix chained replica crash when doing dual channel replication (#2983)
fixFix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
fixFix crashing while MODULE UNLOAD when ACL rules reference a module command or subcommand (#3160)
fixFix server assert on ACL LOAD and resetchannels (#3182)
fixFix bug causing no response flush sometimes when IO threads are busy (#3205)
fixFix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826)
fixFix invalid memory address caused by hashtable shrinking during safe iteration (#2753)
fixCluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#2817)
fixSend duplicate multi meet packet only for node which supports it (#2840)
fixFix loading AOF files from future Valkey versions (#2899)
security(CVE-2025-49844) A Lua script may lead to remote code execution
security(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
security(CVE-2025-46818) A Lua script can be executed in the context of another user
security(CVE-2025-46819) LUA out-of-bound read
fixFix accounting for dual channel RDB bytes in replication stats (#2614)
fixFix EVAL to report unknown error when empty error table is provided (#2229)
fixFix use-after-free when active expiration triggers hashtable to shrink (#2257)
fixFix MEMORY USAGE to account for embedded keys (#2290)
fixFix memory leak when shrinking a hashtable without entries (#2288)
fixPrevent potential assertion in active defrag handling large allocations (#2353)
fixPrevent bad memory access when NOTOUCH client gets unblocked (#2347)
fixConverge divergent shard-id persisted in nodes.conf to primary's shard id (#2174)
fixFix client tracking memory overhead calculation (#2360)
fixFix RDB load per slot memory pre-allocation when loading from RDB snapshot (#2466)
fixDon't use AVX2 instructions if the CPU doesn't support it (#2571)
fixFix bug where active defrag may be unable to defrag sparsely filled pages (#2656)
fixFix missing response when AUTH is errored inside a transaction (#2287)
securityCVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146)
securityCVE-2025-48367 retry accept on transient errors (#2315)
securityCVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146)
fixProperly escape double quotes and backslash in MONITOR command (#2036)
fixFix high CPU usage when fetching a random element in skewed sparse hash table (#2085)
fixFix a bug that allowed clients to process commands when the server has paused command processing (#2109)
fixFix a crash where the wrong slot is used when processing sharded pubsub unsubscribe events (#2137)
fixFix a crash when a module attempts to write auxiliary data with AOF enabled (#2132)
fixFix a bug where the engine may crash when establishing new outbound TLS connections (#2140)
fixFix a bug where a cluster bus packet may be incorrectly marked as invalid (#2144)
fixFix a bug where CLUSTER SLOTS/NODES information can be stale after updating node port/tls-port (#2186)
fixFix a bug where replica in cluster mode can't finish failover when config epoch is outdated (#2178)
fixFix a bug to avoid CLIENT UNBLOCK command to unblock paused clients (#2117)
security(CVE-2025-21605) Limit output buffer for unauthenticated clients (#1994)
fixFix the build on less common platforms in zmalloc.c (#1922)
fixfix: add samples to stream object consumer trees (#1825)
fixFix crash during TLS handshake with I/O threads (#1955)
fixFix cluster slot stats assertion during promotion of replica (#1950)
fixFix panic in primary when blocking shutdown after previous block with timeout (#1948)
fixIgnore stale gossip packets that arrive out of order (#1777)
fixFix incorrect lag reported in XINFO GROUPS (#1952)
fixFix engine crash on module client blocking during keyspace events (#1819)
fixAvoid shard id update of replica if not matching with primary shard id (#573)
fixOnly enable defrag for vendored jemalloc (#1985)
fixAllow scripts to support null characters again (#1984)
featureOptimize bitcount command by using x86 SIMD instructions (#1741)
featureEmbed hash value in hash data type entries to reduce memory footprint (#1579)
featureAdd cluster-manual-failover-timeout configuration to control the timeout for manual failover (#1690)
featureAdd new module API flag to bypass command validation in order to reduce processing overhead (#1357)
featureIntroduce cancel argument to bgsave command (#757)
featureAdd conditional update support to the SET command using IFEQ argument (#1324)
featureAdd more filters to CLIENT LIST (#1401)
featureAdd availability_zone to the HELLO response (#1487)
featureExtend LATENCY LATEST to add sum / cnt stats (#1570)
featureAdd paused_actions and paused_timeout_milliseconds for INFO CLIENTS (#1519)
featureAdd paused_reason to INFO CLIENTS (#1564)
featureAdded COMMANDLOG to record slow executions and large requests/replies (#1294)
featureAdd latency stats around cluster config file operations (#1534)
featureAdd new flag in CLIENT LIST for import-source client (#1398)
featureIntroduce a new memory efficient hash table to store keys (#1186)
featureAccelerate hash table iterator with prefetching (#1501)
featureAccelerate hash table iterator with value prefetching (#1568)
featureReplace dict with new hashtable: hash datatype (#1502)
featureReplace dict with new hashtable for sets datatype (#1176)
featureReplace dict with new hashtable: sorted set datatype (#1427)
featureFree strings during BGSAVE/BGAOFRW to reduce copy-on-write (#905)
featureCreate an empty lua table with specified initial capacity as much as possible (#1092)
featureMove prepareClientToWrite out of loop for HGETALL command (#1119)
featureImproved hashing algorithm for Lua tables (#1168)
featureDo security attack check only when command not found to reduce the critical path. (#1212)
featureTrim free space from inline command argument strings to avoid excess memory usage (#1213)
featureIncrease the max number of io threads to 256. (#1220)
featureRefactor of ActiveDefrag to reduce latencies (#1242)
featureIntegrate fast_float to optionally replace strtod (#1260)
featureImprovements for TLS with I/O threads (#1271)
featureOptimize PFCOUNT, PFMERGE command by SIMD acceleration (#1293)
featureOptimize sdscatrepr by batch processing printable characters (#1342)
featureOptimize ZRANK to avoid path comparisons (#1389)
featureMove clientCron onto a separate timer (#1387)
featureClient struct: lazy init components and optimize struct layout (#1405)
featureOffload reading the replication stream to IO threads (#1449)
featureSkip CRC checksumming during diskless full sync with TLS enabled. (#1479)
featureDeprecate io-threads-do-reads, which has no effect since io threads will now always do reads. (#1138)
featureIntroduce import-mode config to avoid expiration and eviction during data syncing (#1185)
breakingRemove Valkey specific changes in jemalloc source code (#1266)
+55 more items in the release notessecurityGHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030)
fixFix stream commands that mutate consumer-group or PEL state (XGROUP, XSETID, XREADGROUP, XACK, XCLAIM, XAUTOCLAIM) not triggering WATCH and client-side tracking invalidation by @Tarte12 (#3459)
fixFix a server abort on a RESTORE payload declaring a string length that overflows the allocation size; such payloads are now rejected as bad data by @enjoy-binbin (#4733)
fixReject module write commands while the server is paused for writes, preventing a crash from module timer callbacks during CLIENT PAUSE WRITE or CLUSTER FAILOVER by @smkher (#3645)
fixFix ZINTER/ZINTERSTORE returning input-order-dependent scores when a weighted term is 0*inf; a NaN weighted score now counts as 0, matching ZUNION by @leomurillo (#4997)
fixCorrect ValkeyModule_FreeModuleUser, ValkeyModule_ACLAddLogEntry and ValkeyModule_ACLAddLogEntryByUserName declarations to return int as implemented, fixing undefined behavior on targets with strict call signature checks by @rainsupreme (#4676)
fixFix valkey-benchmark spinning on would-block writes, which could starve reply processing and the --duration timer by @thweetkomputer (#4567)
fixFix a huge memory allocation when a command such as COMMAND GETKEYS EVAL declares a far larger key count than the arguments provided by @murphyjacob4 (#3598)
fixReject relative expire times in SET/GETEX, RESTORE, and ValkeyModule_SetExpire that overflow when added to the current time, preventing server aborts from negative expires by @madolson (#4880)
fixFix a server crash when loading an ACL file containing a selector with an unmatched parenthesis by @magic-peach (#4214)
fixSorted set range commands with a negative LIMIT offset now return an empty result instead of a spurious element on btree-encoded keys by @xiaocj (#4637)
fixRedact error text in server logs when hide-user-data-from-log is enabled, so command arguments no longer leak into logs by @zackcam (#4815)
fixFix cluster config saving to avoid publishing truncated nodes.conf files, losing the startup lock after the first save, and failing every save on SMB filesystems such as Azure Files; the lock now lives on a separate nodes.conf.lock file by @KewangZhili (#4489)
fixFix LSET on 64-bit builds silently modifying the wrong element for out-of-range indexes instead of returning an index out of range error by @charsyam (#4823)
securityGHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534)
fixFix a double-free crash when a module timer callback stops its own timer with ValkeyModule_StopTimer by @quanyeyang (#4211)
fixFix AOF truncation after a partially persisted MULTI/EXEC block so writes made after recovery are not lost on a later restart by @chzhoo (#4342)
fixFix an ACL bypass where duplicate STORE/STOREDIST options in GEORADIUS commands let users write keys outside their permitted patterns by @tjade273 (#3971)
fixFix a use-after-free crash when a cluster message for a module-registered type arrives after the module is unloaded by @enjoy-binbin (#4360)
fixFix out-of-bounds access on cluster module messages of type 255, which is now a valid message type by @enjoy-binbin (#4410)
fixFix silent data loss where ACL checks were wrongly applied to commands replayed from the AOF file by @lukepalmer (#3984)
fixFix a client memory accounting leak that inflated the mem_clients_normal INFO field on replicas by @enjoy-binbin (#4395)
fixAlways deep-validate listpack payloads on RDB load and RESTORE, preventing deferred assertion crashes; sanitize-dump-payload is deprecated and now a no-op by @jjuleslasarte (#3721)
fixFix module VM_Yield timing so repeated yields honor busy-reply-threshold instead of the server hz interval by @PingXie (#2131)
fixFix a stack overflow crash when a large TLS write is retried after an OpenSSL write error by @murphyjacob4 (#4307)
fixFix a crash caused by forged cluster bus PUBLISH or MODULE packets carrying oversized payload length fields by @tjade273 (#3972)
fixReject crafted stream payloads in RDB load and RESTORE whose length or field-count metadata is inconsistent, preventing later server panics by @madolson (#3922)
fixFix a cluster link disconnect loop after network failures that caused pub/sub messages between nodes to be lost by @dvkashapov (#2817)
fixFix a use-after-free crash when a client blocked on a key is freed while other clients blocked on the same key are being served by @quanyeyang (#4212)
fixReject crafted stream payloads that misstate live and deleted record counts, preventing data loss on XDEL by @roshkhatri (#4381)
fixFix incorrect CLUSTER SLOT-STATS ORDERBY ordering when slot statistics differ by more than 2^31 by @jzy1688 (#4459)
securityCVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to crash the server using CLIENT KILL (#4234)
securityCVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers. Reported by @z0v3r1n and @lifip. (#4073)
fixStrictly validate CRLF line endings when parsing the RESP protocol, rejecting malformed requests as protocol errors by @enjoy-binbin (#2872)
fixFix memory leak in ZDIFF/ZDIFFSTORE when the result set becomes empty before all input sets are processed by @sarthakaggarwal97 (#3342)
fixFix crash caused by a race between asynchronous client freeing and IO threads reading from the closing client by @deepakrn (#3458)
fixFix double free when loading corrupt stream RDB data containing duplicate consumer PEL entries by @enjoy-binbin (#3498)
fixFix stream corruption and crash when XTRIM marks the last entry of a listpack node as deleted by @smkher (#3591)
fixFix potential crash in TLS pending-data handling when the connection has no SSL object by @zuiderkwast (#3641)
fixFix use-after-free when ACL LOAD removes a user whose authenticated client's free is deferred by @ranshid (#3800)
fixFix use-after-free when a module unregisters the first-registered cluster message receiver for a message type by @eifrah-aws (#3846)
fixFix crash when loading functions after FUNCTION FLUSH ASYNC and make FUNCTION FLUSH actually release Lua VM memory by @enjoy-binbin (#1826)
fixFix file descriptor leak when a blocking connect times out, such as MIGRATE to an unreachable host by @madolson (#3541)
fixFix crash in module LRU/LFU API functions (GetLRU, SetLRU, GetLFU, SetLFU) when passed a NULL key by @yaronsananes (#3610)
fixTLS synchronous I/O no longer leaves a blocking socket in non-blocking mode, preventing unexpected short reads by @xbasel (#1298)
fixFix crash when CLUSTER SLOTS is called without a real client connection, such as from a module timer callback by @bandalgomsu (#2915)
fixFix assertion crash in the IO thread job queue on ARM/aarch64 caused by memory store reordering by @jjuleslasarte (#3878)
fixReject zipmap RESTORE payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @madolson (#3920)
fixReject NAN scores in listpack and ziplist encoded sorted sets on RDB load, preventing a later crash on skiplist conversion by @madolson (#3921)
fixFix crash on 32-bit systems where time_t is 64-bit (e.g. Alpine with time64) when generating INFO output by @chenshi5012 (#3787)
fixCOMMAND INFO in RESP3 now returns an empty Array instead of a Set for the subcommands field of commands without subcommands by @rickrams (#3939)
fixManual failover votes are no longer restricted by two times the node timeout, preventing manual failover timeouts by @enjoy-binbin (#1305)
fixAutomatic failover votes are no longer restricted by two times the node timeout, matching the manual failover change by @enjoy-binbin (#1356)
fixSENTINEL SET now rejects values containing control characters and config rewrite escapes them, preventing config injection by @eifrah-aws (#3847)
fixReject control characters and delimiters in cluster AUX fields and cluster-announce-ip to prevent nodes.conf injection by @eifrah-aws (#3848)
fixFix lua-enable-insecure-api yes not taking effect when set at startup via config file or command line by @enjoy-binbin (#3548)
fixLog 'Connection reset by peer' instead of the misleading 'Success' when the connection to the primary closes during sync by @abmathur-ie (#3580)
fixRedact key names and user data from additional server log messages when hide-user-data-from-log is enabled by @zackcam (#3872)
fixIncrease the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @pkhartsk (#3843)
fixvalkey-cli --cluster del-node can now remove unreachable or failed nodes instead of failing with 'No such node ID' by @yang-z-o (#3209)
fixFix valkey-cli --cluster assigning all uncovered slots to the same primary instead of distributing them randomly by @abmathur-ie (#3586)
security(CVE-2026-23479) Use-After-Free in unblock client flow
security(CVE-2026-25243) Invalid Memory Access in RESTORE command
security(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
otherNOTICE: This release has been revoked. The 8.0.8 tag was placed on a commit that is not part of the 8.0 release branch. Users should upgrade to 8.0.9 instead.
security(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
security(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
fixFix ltrim should not call signalModifiedKey when no elements are removed (#2787)
fixFix chained replica crash when doing dual channel replication (#2983)
fixFix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
fixAvoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#3160)
fixFix server assert on ACL LOAD and resetchannels (#3182)
fixFix bug causing no response flush sometimes when IO threads are busy (#3205)