Product Release Advisory - VMware Tanzu for Valkey 9.0.3

Product/Component

VMware Tanzu Data Intelligence

4 more products

Notification Id

37182

Last Updated

11 March 2026

Initial Publication Date

11 March 2026

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

10.0

WorkAround

Affected CVE

Product Release Advisory

Advisory ID:	TNZ-2026-0163
Severity:	Critical
Issue Date:	2026-03-10
Updated on:
Synopsis	One critical & maney high vulnerabilities were found in Valkey 9.0.2, which is addressed in Valkey 9.0.3

Product Version Release Advisory

VMware Tanzu for Valkey

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/9-0/tanzu-valkey-docs/release-notes.html

Security Fixes

This release has the following security fixes, listed by component and area.

Component

Vulnerabilities Resolved

Valkey 9.0.2, fixed in Valkey 9.0.3

CVE-2025-68121 (critical)
CVE-2025-61732 (high)
CVE-2025-4674 (high)
CVE-2025-61731 (high)
CVE-2025-61729 (high)
CVE-2025-61726 (high)
CVE-2025-58187 (high)
CVE-2025-58188 (high)
CVE-2025-61723 (high)
CVE-2025-61725 (high)
CVE-2025-47907 (high)
CVE-2025-68119 (high)
CVE-2025-61727 (medium)
CVE-2025-61728 (medium)
CVE-2025-47906 (medium)
CVE-2025-47912 (medium)
GHSA-j5w8-q4qc-rx2x (medium)
CVE-2025-58186 (medium)
CVE-2025-61724 (medium)
CVE-2025-61730 (medium)
GHSA-f6x5-jh6r-wrfv (medium)
CVE-2025-58189 (medium)
CVE-2025-58185 (medium)
CVE-2025-58183 (medium)

History

2026-03-10: Initial vulnerability report published.

Contact

E-mail: [email protected]

VMware Tanzu Security Advisories: https://tanzu.vmware.com/security