"The combination of widespread deployment, default insecure configurations, and the severity of the vulnerability creates an ...

The critical vulnerability allows attacks to escape the in-memory data store’s Lua sandbox and subsequently execute arbitrary ...

Overview Recently, NSFOCUS CERT detected that Redis issued a security bulletin and fixed the Redis Lua code execution vulnerability (CVE-2025-49844); Because Redis’s Lua script engine has a ...

A 13-year-old vulnerability that affects all versions of the Redis open source data storage service can allow attackers to take full control of a host system, posing a significant threat to cloud ...

It’s an all-too familiar situation: at first, Redis users find the system easy to deploy and use. But then their workloads grow and their data volumes increase, and things start to change quickly.