Skip to content
fr Sign in
7.7 High

CVE-2026-25243 Redis is an in-memory data structure store

Description

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.

Affected products and versions

Product Affected versions Fixed in
Redis 8.6 earliest → < 8.6.3 8.6.3
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Show the 19 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux AppStream E4S (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Hardened Images Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8 8100020260522105353.489197 earliest → < 8100020260522105353.489197e6 8100020260522105353.489197e6
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260618162855.522 earliest → < 8040020260618162855.522a0ee4 8040020260618162855.522a0ee4
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260618162855.522 earliest → < 8040020260618162855.522a0ee4 8040020260618162855.522a0ee4
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260623095617 earliest → < 8060020260623095617.ad008a3a 8060020260623095617.ad008a3a
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 8060020260623095617 earliest → < 8060020260623095617.ad008a3a 8060020260623095617.ad008a3a
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260626132343.63 earliest → < 8080020260626132343.63b34585 8080020260626132343.63b34585
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260626132343.63 earliest → < 8080020260626132343.63b34585 8080020260626132343.63b34585
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 9040020260618054637.9 earliest → < 9040020260618054637.9 9040020260618054637.9
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260602115714.9 earliest → < 9060020260602115714.9 9060020260602115714.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Redis

The 50 CVEs of Redis →
CVE-2026-81934 Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS… 7.1 High CVE-2026-72568 An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial… 7.1 High CVE-2026-66373 Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code… 7.5 High CVE-2026-23631 Redis is an in-memory data structure store 6.1 Medium
Track this CVE