Level-10 vuln lurking in Redis source code for 13 years could allow remote code execution
A 13-year-old critical flaw in Redis servers, rated a perfect 10 out of 10 in severity, can let an authenticated user trigger remote code execution.
For anyone using Redis Cloud, the service has already been upgraded, with fixes, so no need to do anything. But for anyone using self-managed versions of the widely used in-memory database (OSS, CE, Stack, and Software versions): upgrade to the latest release listed here.
The security flaw, tracked as CVE-2025-49844, affects all Redis versions with ...
Read more at theregister.com