CVE-2021-31294

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.

• CWE-617

• https://github.com/redis/redis/commit/46f4ebbe842620f0976a36741a72482620aa4b48Patch
• https://github.com/redis/redis/commit/6cbea7d29b5285692843bc1c351abba1a7ef326fPatch
• https://github.com/redis/redis/issues/8712Exploit, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230814-0007/
• https://github.com/redis/redis/commit/46f4ebbe842620f0976a36741a72482620aa4b48Patch
• https://github.com/redis/redis/commit/6cbea7d29b5285692843bc1c351abba1a7ef326fPatch
• https://github.com/redis/redis/issues/8712Exploit, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230814-0007/

Published

Jul 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31274In LibreNMS < 21.3.0, a stored XSS vulnerability was identif…5.4
• CVE-2021-3128In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASU…7.5
• CVE-2021-31280An issue was discovered in tp5cms through 2017-05-25. admin.…6.1
• CVE-2021-3129Ignition before 2.5.2, as used in Laravel and other products…9.8
• CVE-2021-31291Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-31292An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 …7.5
• CVE-2021-3130Within the Open-AudIT up to version 3.5.3 application, the w…5.9
• CVE-2021-3131The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends b…7.5
• CVE-2021-31314File upload vulnerability in ejinshan v8+ terminal security …9.8
• CVE-2021-31315Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Teleg…5.5
• CVE-2021-31316The unprivileged user portal part of CentOS Web Panel is aff…9.8
• CVE-2021-31317Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Teleg…5.5