CVE-2025-49844

Published Oct 3, 2025

Last updated 23 days ago

Redis

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-49844 is a vulnerability in Redis that stems from improper memory management within its embedded Lua interpreter. The core issue is a use-after-free bug that can be triggered via a specially crafted Lua script. An authenticated user can manipulate the garbage collection process, exploiting freed memory pointers to potentially execute arbitrary code within the Redis server's process. This vulnerability exists in all Redis versions that include Lua scripting support. Redis has released patches to address this vulnerability. For more information on remediation, see the security advisory from Redis.

Description: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
Source: security-advisories@github.com
NVD status: Analyzed
Products: redis, valkey

Insights

Analysis from the Intruder Security Team

Published Oct 7, 2025

Authenticated access and the ability to run Lua scripts is required to exploit this vulnerability. However, all affected instances without authentication configured are vulnerable. Further details from the Redis team can be found here.

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.9
Impact score: 6
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C2F4D4F6-6F7C-46BC-B37C-DFAC34B097AC",
            "versionEndExcluding": "6.2.20"
          },
          {
            "criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4F82BD2A-473F-4F3F-9C80-C6448D07C45D",
            "versionEndExcluding": "7.2.11",
            "versionStartIncluding": "7.0"
          },
          {
            "criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6E336B8-E000-4EFA-95F8-F2B74A4913F0",
            "versionEndExcluding": "7.4.6",
            "versionStartIncluding": "7.4.0"
          },
          {
            "criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "459EBC07-D37A-44E5-95DB-4C3FD9F008FF",
            "versionEndExcluding": "8.0.4",
            "versionStartIncluding": "8.0.0"
          },
          {
            "criteria": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CBF13EC1-FE0A-4242-B8D3-2681485DDDF2",
            "versionEndExcluding": "8.2.2",
            "versionStartIncluding": "8.2.0"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CAF97D0-BE35-43AE-B820-3A88D1F49050",
            "versionEndExcluding": "7.2.11"
          },
          {
            "criteria": "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0285AE3-BBEA-4D0E-A8AD-957EC3E78870",
            "versionEndExcluding": "8.0.6",
            "versionStartIncluding": "8.0.0"
          },
          {
            "criteria": "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "725746C6-025D-4364-9D97-E1315D670DF6",
            "versionEndExcluding": "8.1.4",
            "versionStartIncluding": "8.1.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.