{"id":110677,"date":"2026-05-19T12:00:00","date_gmt":"2026-05-19T12:00:00","guid":{"rendered":"https:\/\/www.red-gate.com\/simple-talk\/?p=110677"},"modified":"2026-05-18T15:23:43","modified_gmt":"2026-05-18T15:23:43","slug":"4-cves-are-affecting-valkey-databases-heres-everything-you-need-to-know-and-what-you-should-do-right-now-to-protect-yours","status":"publish","type":"post","link":"https:\/\/www.red-gate.com\/simple-talk\/databases\/4-cves-are-affecting-valkey-databases-heres-everything-you-need-to-know-and-what-you-should-do-right-now-to-protect-yours\/","title":{"rendered":"4 CVEs are affecting Valkey databases. Here’s everything you need to know (and what you should do, right now, to protect yours)"},"content":{"rendered":"\n

There’s now another reason an immediate patch is needed for organizations running Valkey clusters<\/a>, according to Percona<\/a> (and other database experts.)<\/p>\n\n\n\n

In this article, I’ll detail four CVEs affecting your Valkey database. I’ll tell you what they are, why they’re dangerous, and detail, step-by-step, exactly what you should do for your users to avoid seeing a deface page<\/a> the next time they visit your website. <\/strong><\/p>\n\n\n\n

But first, some background.<\/p>\n\n\n\n

What is Valkey, and what’s it used for?<\/h2>\n\n\n\n

It\u2019s safe to assume that most of you reading this article will know your way around database management systems<\/a>. And, if so, you’ll also know that not all DBMS’ are built equal. A system considered ‘mainstream’ by one group of developers may not be seen that way by others – and that’s exactly the case with Valkey.<\/p>\n\n\n\n

In a way, Valkey is like MySQL<\/a> or SQL Server<\/a> \u2013 and in other ways, it\u2019s different. According to Valkey themselves<\/a>, it’s an open-source, high-performance key-value datastore, able to support a wide variety of workloads. These workloads include (but are not limited to), caching, message queues<\/a>, session storage, real-time analytics, AI and vector workloads, and more.<\/p>\n\n\n\n

Valkey is considered a NoSQL<\/a> database. As such, it solves issues for developers storing flexible structures, including geospatial data<\/a>, vectors, and anything else that fits into the key-value database category<\/a>. Valkey is used in industries like gaming, AI systems, and other high-traffic web applications.<\/p>\n\n\n\n

Why is Valkey used in these industries? <\/h2>\n\n\n\n

Valkey is commonly used in these industries because it provides developers with quite a few advantages:<\/p>\n\n\n

\n