commit b351d5a3210e61cc3b22ba38a723d6da8f3c298a
Author: Oran Agra <oran@redislabs.com>
Date:   Wed Oct 2 20:01:14 2024 +0300

    Fix ACL SETUSER Read/Write key pattern selector (CVE-2024-31227)
    
    The '%' rule must contain one or both of R/W

diff --git a/src/acl.c b/src/acl.c
index 5fd956d23..af58684e2 100644
--- a/src/acl.c
+++ b/src/acl.c
@@ -1051,7 +1051,7 @@ int ACLSetSelector(aclSelector *selector, const char* op, size_t oplen) {
                     flags |= ACL_READ_PERMISSION;
                 } else if (toupper(op[offset]) == 'W' && !(flags & ACL_WRITE_PERMISSION)) {
                     flags |= ACL_WRITE_PERMISSION;
-                } else if (op[offset] == '~') {
+                } else if (op[offset] == '~' && flags) {
                     offset++;
                     break;
                 } else {