AIKIDO-2026-321068
predis/predis is vulnerable to CRLF Injection
98
Critical Risk
This Affects:
predis/predisTL;DR
Predis\Connection\AbstractAggregateConnection::write(string $buffer) splits the write buffer on literal \r\n bytes to find Redis command boundaries, instead of using the RESP length prefixes the Redis server uses. Untrusted data passed to write on a cluster or replication connection can contain \r\n bytes that start a second Redis command. That second command is sent to the node the split fragment is routed to, leading to arbitrary Redis commands on the cluster or replication topology that the application did not send.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use a cluster or replication connection to write externally influenced data.
Background info
predis/predis is vulnerable to CRLF Injection in versions 0.0.1 - 3.6.0.
How to fix this
Upgrade the predis/predis library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.