CVE-2025-49844 CRITICAL

Published: 2025-10-03 | Last Modified: 2026-03-20 | Status: Modified

Description

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS Metrics

Base Score: 9.9 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	LOW
User Interaction	NONE
Scope	CHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.1

Impact Score: 6.0

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-416

Affected Products

Vendor	Product	Version	Update	Type
redis	redis	*	<built-in method update of dict object at 0x7e60a8b56f80>	Application
redis	redis	*	<built-in method update of dict object at 0x7e6112c9a340>	Application
redis	redis	*	<built-in method update of dict object at 0x7e60a87b57c0>	Application
redis	redis	*	<built-in method update of dict object at 0x7e6112c9b000>	Application
redis	redis	*	<built-in method update of dict object at 0x7e60a8b576c0>	Application
lfprojects	valkey	*	<built-in method update of dict object at 0x7e60a8b54040>	Application
lfprojects	valkey	*	<built-in method update of dict object at 0x7e60a8b55e40>	Application
lfprojects	valkey	*	<built-in method update of dict object at 0x7e6108beaac0>	Application

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:redis:redis::::::::`
Yes	`cpe:2.3:a:redis:redis::::::::`
Yes	`cpe:2.3:a:redis:redis::::::::`
Yes	`cpe:2.3:a:redis:redis::::::::`
Yes	`cpe:2.3:a:redis:redis::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:lfprojects:valkey::::::::`
Yes	`cpe:2.3:a:lfprojects:valkey::::::::`
Yes	`cpe:2.3:a:lfprojects:valkey::::::::`

References

https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539
Source: [email protected]

Patch
https://github.com/redis/redis/releases/tag/8.2.2
Source: [email protected]

Release Notes
https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q
Source: [email protected]

Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/10/07/2
Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory
https://github.com/lastvocher/redis-CVE-2025-49844
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0