Skip to content
Threat Feed
Subscribe

Tag

Redis

9 briefs RSS
low advisory

Resource Exhaustion in RedisArrayAggregator

A vulnerability in RedisArrayAggregator allows remote attackers to trigger memory exhaustion via a crafted RESP payload that forces eager allocation of array capacity.

RedisArrayAggregator denial-of-service memory-exhaustion redis
1c
high advisory

Out-of-Bounds Read Vulnerability in Redis Cluster Bus

A vulnerability in the Redis cluster bus packet parser allows remote attackers to trigger an out-of-bounds read via crafted PING, PONG, or MEET packets, resulting in potential information disclosure or denial of service.

Redis vulnerability memory-safety denial-of-service
1c
critical advisory

Remote Command Injection and DoS in Predis via CRLF Smuggling

Predis versions 3.0.0-RC1 through 3.2.0 are vulnerable to CRLF smuggling in pipeline operations on aggregate connections, enabling remote command injection on cluster configurations or denial-of-service on replication setups.

Predis redis injection php
1t 1c
high advisory

Suspicious Redis Server Process Execution

Detection of unauthorized system shell and utility execution originating from Redis server processes indicative of post-exploitation activity or sandbox escapes like CVE-2022-0543.

redis-server +1 redis linux post-exploitation cve-2022-0543
1r 1t 1c
critical advisory

Multiple Vulnerabilities in Redis Allow Remote Code Execution

Multiple vulnerabilities in Redis could allow an attacker to execute arbitrary code remotely, potentially leading to complete system compromise.

Redis rce vulnerability
2r 1t 3c
high advisory

Spring AI Redis Store TAG Injection Vulnerability (CVE-2026-22744)

CVE-2026-22744 is a code injection vulnerability in Spring AI's RedisFilterExpressionConverter which allows an attacker to inject arbitrary commands into RediSearch TAG blocks via unescaped user-controlled strings, affecting versions 1.0.0 before 1.0.5 and 1.1.0 before 1.1.4.

injection spring-ai redis
2r 1t
critical advisory

Multiple Vulnerabilities in Redis

Multiple vulnerabilities in Redis allow an attacker to execute arbitrary program code and perform a denial-of-service attack.

redis vulnerability code execution denial of service
2r 2t
high advisory

Open WebUI Cross-Instance Cache Poisoning Vulnerability

Open WebUI versions up to 0.8.12 are vulnerable to cross-instance cache poisoning when multiple instances share a Redis backend, allowing an attacker with admin access on one instance to overwrite cache values used by other instances, leading to data exfiltration and prompt injection attacks.

open-webui +1 cache-poisoning redis vulnerability
2r 2t
critical advisory

Redis Vulnerabilities Allow Local Code Execution

A local attacker can exploit multiple unspecified vulnerabilities in Redis to achieve arbitrary code execution on the host system.

Redis code-execution local-privilege-escalation
2r 1t