Skip to main content

Redis CVE-2025-46818

| EUVDEUVD-2025-33201 HIGH
Code Injection (CWE-94)
2025-10-03 security-advisories@github.com
RCE Redis Code Injection
7.3
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Authenticate to Redis as low-privileged user
  2. Delivery
    Send crafted Lua EVAL/FUNCTION script
  3. Exploit
    Poison shared basic-type metatables
  4. Execution
    Victim user later runs a Lua script
  5. Impact
    Attacker code executes in victim's context

Vulnerability Assessment

Weakness
CWE
CWE-94
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Code injection prevention, sandbox exec
MITRE ATT&CK

2 techniques across 2 tactics: Execution, Initial Access

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Requires that Lua scripting is enabled (the default in Redis) and that the attacker is an authenticated user with ACL permission to run the EVAL/EVALSHA/EVAL_RO or FUNCTION command families (PR:L). Critically, cross-user code execution depends on a separate, higher-value user subsequently executing a Lua script in the same server instance so that the poisoned shared metatables are triggered in that user's context (the UI:R / user-interaction element). Limiting factors: authentication is mandatory (no anonymous exploitation), a victim must run a script for the full cross-user impact, and the documented workaround - using Redis ACLs to deny the EVAL and FUNCTION command families - fully blocks exploitation without patching. Highest real-world exposure is multi-tenant or shared Redis deployments; a single-user instance with no second script-running principal has sharply reduced impact.
Impact

This is a moderate-priority issue rather than a drop-everything emergency, but it should not be ignored in multi-tenant Redis deployments. The CVSS 3.1 base score is 7.3 (High) with vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating high confidentiality, integrity and availability impact but requiring an authenticated user (PR:L) and user interaction (UI:R). EPSS is 3.18% (87th percentile) - a low absolute exploitation probability but an elevated percentile, consistent with a flaw that requires authentication and a victim action rather than mass opportunistic exploitation. Public exploit code exists (POC=YES), which raises practical concern, but the vulnerability is NOT in CISA KEV, so there is no confirmed active exploitation - POC availability and active exploitation are distinct signals and should not be conflated. A key conflict to flag: the official CVSS marks AV:L (local), yet Redis EVAL/FUNCTION commands are normally issued over the network and the shared Lua interpreter is poisoned server-side, which argues for AV:N - verify the attack-vector assignment with the vendor/NVD, as it materially changes prioritization. Net: a real but gated risk - most dangerous where untrusted or lower-privileged users share a Redis instance with higher-privileged ones and Lua scripting is enabled (the default).
Exploit ScenarioDerived

In a shared/multi-tenant Redis instance, an authenticated low-privileged user sends a specially crafted Lua script via EVAL that manipulates the metatables of basic Lua types in the shared interpreter, planting malicious behavior that persists in the Lua state. When a second, higher-privileged user later runs any Lua script on the same server, the attacker's injected code executes in that user's context, enabling cross-user code execution. Public exploit code exists, and the source fix (readonly metatables for basic types) confirms the metatable-poisoning technique is practical.
Act Now Prioritize within 24-48h. Why: Active threat signals + CRITICAL/HIGH severity.
Patch available 3.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Oct 19, 2026

CVE-2025-46818 is a sandbox-escape flaw in Redis's embedded Lua scripting engine (all versions up to and including 8.2.1) that lets an authenticated user with EVAL/FUNCTION privileges poison shared Lua metatables for basic types such as strings and numbers, so that code they plant can execute later in another user's scripting context. Cross-user impact requires a second, more privileged user to run a Lua script against the same server instance after the tampering, and exploitation is fully blocked by denying the EVAL and FUNCTION command families via ACLs. Publicly available exploit code exists and EPSS sits at roughly 3.2% (87th percentile), but there is no confirmed active exploitation (not in CISA KEV); the practical exposure concentrates in multi-tenant or shared Redis deployments where multiple principals run scripts.

Earlier versions of this analysis (1)
v1 Mar 13, 2026 - 19:29 CVSS 6.0

RemediationAI

Vendor-released patch: upgrade to Redis 8.2.2 or later (release https://github.com/redis/redis/releases/tag/8.2.2, fixing commit 45eac0262028c771b6f5307372814b75f49f7a9e, advisory GHSA-qrv7-wcrx-q5jp). Operators running distribution packages should apply the corresponding builds from Ubuntu (USN-7893-1), Debian (DSA-6020-1/DSA-6022-1), Red Hat (the RHSA errata listed) or SUSE (SUSE-SU-2025:03499), since distro packages may lag the upstream fixed version. If patching must be deferred, the documented and complete workaround is to deny the EVAL and FUNCTION command families through Redis ACLs - e.g. -@scripting or explicit -eval -evalsha -eval_ro -fcall -fcall_ro -function - which fully blocks this exploit at the cost of disabling all server-side scripting for the restricted users; applications that rely on EVAL/FCALL will break under that rule, so scope the ACL to untrusted principals and keep scripting for a single trusted user where possible. Note that the fix also disables getfenv/setfenv by default via the new hidden lua-enable-deprecated-api config, so scripts using those functions will need review before or after upgrade. There is no confirmed active exploitation (not in CISA KEV), but publicly available exploit code exists (EPSS ~3.2%), and multi-tenant or shared Redis instances where several users can run scripts are the highest-risk deployments.

Affected VersionsENISA

Redis < 8.2.2

Affected Packages

euvd redis fix: 8.2.2

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

Redis embeds a Lua interpreter to support EVAL/EVALSHA and the FUNCTION (FUNCTION LOAD/FCALL) APIs, and it sandboxes scripts by restricting the globals that scripts can reach. The underlying weakness is CWE-94 (code injection): the protections that keep Lua's built-in metatables readonly were not applied to the metatables of primitive types (string, number, boolean, nil, function, thread, light userdata). A script could therefore assign to fields like getmetatable('').__index or getmetatable(123).__index, altering the shared, process-wide metamethods; those modified metatables persisted beyond the script that set them and affected subsequent scripts, including those run by other users. The upstream fix in 8.2.2 adds luaSetTableProtectionForBasicTypes(), which recursively marks the primitive-type metatables readonly, and moves getfenv/setfenv into a deprecated-API allow list gated behind a new hidden immutable config lua-enable-deprecated-api (default off), while the commit's regression test explicitly checks that indexing the metatable of nil, strings, numbers, booleans, functions and coroutines is rejected. The CVSS vector reflects the requirement that a victim later execute a script (UI:R) and that the attacker already hold scripting ACL privileges (PR:L).

Know when Redis gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.3 HIGH
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vuln.today AI 8.0 HIGH

Redis scripting commands are issued over the network so AV:N (not AV:L); an authenticated script-capable user is required (PR:L) and a victim must run a script (UI:R), with full process-context compromise (C/I/A:H).

3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Ubuntu MEDIUM
SUSE HIGH
Red Hat 6.0 MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Severity Changed
Oct 19, 2026 - 17:23 NVD
MEDIUM HIGH
CVSS changed
Oct 19, 2026 - 17:23 NVD
6.0 (MEDIUM) 7.3 (HIGH)
Patch released
Jan 27, 2026 - 19:38 nvd
Patch available
CVE Published
Oct 03, 2025 - 19:15 nvd
HIGH 7.3
CVE Published
Oct 03, 2025 - 19:15 nvd
MEDIUM 6.0

DescriptionNVD

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.

Executive ViewAI

Why It Matters

Organizations using Redis should be aware of moderate risk from CVE-2025-46818, a code injection vulnerability rated CVSS 6.0. Exploitation could allow attackers to execute code or inject malicious input. A patch is available and should be applied during regular vulnerability management.

Business Impact: Low
Compensating Controls

Apply vendor patch. If patching is delayed: deploy WAF rules, restrict network access, enable logging.

Threat Intelligence Overview

Threat Score
5.1/10
Composite threat intelligence
EPSS Score
3.2%
Top 13% exploitable
Prevalence
High
Redis is a near-universal in-memory cache/database across cloud and enterprise backends
Threat Intel
1
1 sources
Exploit
POC
Public exploit code exists
Data Quality
7 sources
Confidence: High
EUVD NVD CVE.org EPSS CISA POC (1) Vendor GitHub Nuclei

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC Yes
EPSS 3.2%
Patch available Yes
Active threat Yes
Deciding rule
Active threat signals + CRITICAL/HIGH severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
Poc
System Exposure· derived
Small
Automatable· derived
No
Human Impact
Low

Priority Score

69
Low Medium High Critical
KEV: 0
EPSS: +3
CVSS: +36
PoC: +20
Weaponized: 0
Threat intel: +10
Gov advisory: 0

Attack Technique

Code Injection CRITICAL

Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

More in Redis

View all
CVE-2026-48172 CRITICAL POC
10.0 May 21

Privilege escalation to root in the LiteSpeed User-End cPanel Plugin (versions 2.3 through before 2.4.5) lets attackers

CVE-2025-49844 CRITICAL POC
9.9 Oct 03

UAF in Redis 8.2.1 via crafted Lua scripts by authenticated users. EPSS 12.4%. Patch available.
CVE-2025-46817 HIGH POC
8.8 Oct 03

Authenticated Redis users with permission to run server-side Lua can trigger an integer overflow (CWE-190) in the bundle
CVE-2022-0543 CRITICAL POC
10.0 Feb 18

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific
CVE-2018-11218 CRITICAL POC
9.8 Jun 17

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,
CVE-2015-4335 CRITICAL POC
10.0 Jun 09

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
CVE-2016-8339 CRITICAL POC
9.8 Oct 28

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. Rated cr
CVE-2025-46819 HIGH POC
7.1 Oct 03

Authenticated Lua script execution in Redis 8.2.1 and earlier can be abused with a crafted long-string delimiter to trig
CVE-2026-77602 CRITICAL POC
9.9 Sep 23

Authenticated remote code execution in OpenC3 COSMOS (Ruby gem 'openc3' versions 5.1.0 through 7.2.1) lets any logged-in
CVE-2026-27574 CRITICAL POC
9.9 Feb 21

Code injection in OneUptime monitoring via custom JS monitor using vm module. PoC and patch available.
CVE-2026-84372 CRITICAL POC
9.8 Sep 01

RESP protocol command injection in Predis, the popular PHP client for Redis and Valkey, affects versions 3.0.0-RC1 throu
CVE-2021-31649 CRITICAL POC
9.8 Jun 24

In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerab

Same weakness CWE-94 – Code Injection

View all
CVE-2023-3519 CRITICAL POC
9.8
CVE-2021-22205 CRITICAL POC
10.0
CVE-2012-0158 HIGH POC
8.8
CVE-2021-44529 CRITICAL POC
9.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Vendor StatusVendor

Ubuntu

Priority: Medium
redict
Release Status Version
jammy DNE -
noble DNE -
upstream needs-triage -
plucky ignored end of life, was needs-triage
questing needs-triage -
valkey
Release Status Version
jammy DNE -
upstream needs-triage -
noble released 7.2.11+dfsg1-0ubuntu0.2
plucky released 8.0.6+dfsg1-0ubuntu0.2
questing released 8.1.4+dfsg1-0ubuntu0.2
redis
Release Status Version
bionic needed -
focal needed -
jammy needed -
noble needed -
trusty needed -
upstream released 8.2.2
xenial needed -
plucky ignored end of life, was needed
questing needed -
USN-7893-1

Debian

Bug #1117690
redict
Release Status Fixed Version Urgency
forky, sid fixed 7.3.6+ds-1 -
(unstable) fixed 7.3.6+ds-1 -
redis
Release Status Fixed Version Urgency
bullseye vulnerable 5:6.0.16-1+deb11u2 -
bullseye (security) vulnerable 5:6.0.16-1+deb11u8 -
bookworm, bookworm (security) fixed 5:7.0.15-1~deb12u6 -
trixie (security), trixie fixed 5:8.0.2-3+deb13u1 -
forky, sid fixed 5:8.0.5-1 -
bookworm fixed 5:7.0.15-1~deb12u6 -
trixie fixed 5:8.0.2-3+deb13u1 -
(unstable) fixed 5:8.0.4-1 -
valkey
Release Status Fixed Version Urgency
trixie (security), trixie fixed 8.1.1+dfsg1-3+deb13u1 -
forky, sid fixed 8.1.4+dfsg1-1 -
trixie fixed 8.1.1+dfsg1-3+deb13u1 -
(unstable) fixed 8.1.4+dfsg1-1 -
DSA-6020-1 DSA-6022-1

SUSE

Severity: High
Product Status
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd Affected
SUSE Enterprise Storage 7.1 Fixed
SUSE Liberty Linux 8 Fixed
SUSE Liberty Linux 9 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS Fixed

Threat IntelligenceMISP

CISA Advisories
ICSA-26-083-03
Sources: CISA (public domain), Metasploit/Nuclei

References

Advisories & patches
PATCH https://github.com/redis/redis/commit/45eac0262028c771b6f5307372814b75f49f7a9e ADVISORY https://access.redhat.com/errata/RHSA-2025:19237 ADVISORY https://access.redhat.com/errata/RHSA-2025:19238 ADVISORY https://access.redhat.com/errata/RHSA-2025:19345 ADVISORY https://access.redhat.com/errata/RHSA-2025:19675 ADVISORY https://access.redhat.com/errata/RHSA-2025:20926 ADVISORY https://access.redhat.com/errata/RHSA-2025:20955 ADVISORY https://access.redhat.com/errata/RHSA-2025:21916 ADVISORY https://access.redhat.com/errata/RHSA-2025:21936 ADVISORY https://security-tracker.debian.org/tracker/dsa-6020-1 ADVISORY https://security-tracker.debian.org/tracker/dsa-6022-1 ADVISORY https://ubuntu.com/security/notices/USN-7893-1 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03499/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03500/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03501/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03502/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03505/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03506/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:03507/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20022/ REF https://github.com/redis/redis/releases/tag/8.2.2 REF https://github.com/redis/redis/security/advisories/GHSA-qrv7-wcrx-q5jp

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy