Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-25243 | Redis: In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated… | 7.7 | 4% | ||
| CVE-2026-25589 | RedisBloom: The module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker… | 7.7 | 1% |
From the original article
3 min read at thehackernews.com
Swati Khandelwal Jul 24, 2026 Vulnerability / Database Security Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6. 2. 22, 7.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.