CVE-2026-25589

Published May 5, 2026

Last updated 2 months ago

Database

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-25589 describes a vulnerability within RedisBloom, a probabilistic data structures module for Redis. The issue stems from the module's inadequate validation of serialized values when processed via the Redis `RESTORE` command. An authenticated attacker with the necessary permissions to execute `RESTORE` on a server running the RedisBloom module can exploit this flaw. By supplying a specially crafted serialized payload, the attacker can trigger invalid memory access, which may lead to remote code execution. This vulnerability affects all versions of RedisBloom prior to 2.8.20, with a recommended fix being an update to version 2.8.20 or restricting access to the `RESTORE` command using ACL rules as a workaround.

Description: RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisBloom module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This issue is fixed in version 2.8.20.
Source: security-advisories@github.com
NVD status: Analyzed
Products: redisbloom

Risk scores

CVSS 4.0

Type: Secondary
Base score: 7.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-122

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redisbloom:redisbloom:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F671B2DB-B74C-4B26-A496-005FF911B3D5",
            "versionEndExcluding": "2.8.20",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.