CVE-2026-88411: C Payload Deserializer Process Exit On Invalid Inputcve-2026-88411-c-payload-deserializer-process-exit-on-invalid-input
$FUNC terminates the whole process with exit($STATUS) when it rejects bytes deserialized from an in-memory payload (fmemopen'd buffer / FILE* stream). In a Redis module this code is reachable with attacker-controlled bytes via module commands (e.g. GRAPH.EFFECT), so one malformed payload kills the server instead of reporting an error; after a supervised rest
