Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-49844

83
FAUCET Score

CVE-2025-49844 is a critical use-after-free vulnerability in Redis versions 8.2.1 and below, affecting all versions with Lua scripting, including lfprojects redis/valkey and redis redis/valkey. An authenticated attacker can exploit this flaw by crafting a special Lua script to manipulate the garbage collector, potentially leading to remote code execution. With a CVSS score of 9.9 (CRITICAL), this vulnerability has a low attack complexity and can result in complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit/Nuclei/ExploitDB), the vulnerability has garnered significant community discussion (34 mentions) and media coverage (6 articles), indicating high awareness. The issue is fixed in Redis 8.2.2, and a workaround involves restricting EVAL and EVALSHA commands via ACL.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.2.20CPE matchmatch criteria
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
>= 7.0, < 7.2.11CPE matchmatch criteria
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
>= 7.4.0, < 7.4.6CPE matchmatch criteria
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
>= 8.0.0, < 8.0.4CPE matchmatch criteria
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
>= 8.2.0, < 8.2.2CPE matchmatch criteria
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.9CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.1
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
86.77%
Probability of exploitation in next 30 days
EPSS Percentile
99.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.8677 is in the 100th percentile among its peer group of 1,124 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 1.0 Bluesky, 0.5 Mastodon, and 1.6 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: cbl2 redis 6.2.18-3 on CBL Mariner 2.0Fixed in: 6.2.20-1
microsoftpatch availablevia msrc
Product: 20345-17086Fixed in: 6.2.20-1
netgearpatch availablevia llm_extracted
Fixed in: latest maintenance version
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: redis:6-8040020251022121413.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: redis:6-8040020251022121413.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: redis:6-8060020251022110425.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: redis:6-8060020251022110425.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: redis:6-8060020251022110425.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: redis:6-8080020251022085755.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: redis:6-8080020251022085755.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: redis-0:6.2.20-1.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: redis:7-9060020251007094800.9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: redis-0:6.2.20-2.el9_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: redis:7-9070020251016095039.9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: valkey-0:8.0.6-2.el9_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: redis-0:6.2.6-1.el9_0.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: redis-0:6.2.7-1.el9_2.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: redis:7-9040020251015162111.9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: redis-0:6.2.7-1.el9_4.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.16Fixed in: openshift-gitops-1/gitops-rhel8-operator:sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.17Fixed in: openshift-gitops-1/gitops-rhel8-operator:sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.18Fixed in: openshift-gitops-1/gitops-rhel8-operator:sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: valkey-0:8.0.6-2.el10_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: valkey-0:8.0.6-1.el10_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: redis:6-8100020251007064521.489197e6
View patch
sophospatch availablevia llm_extracted
Fixed in: latest patched versions
View patch
ubuntupatch availablevia ubuntu_usn
Product: lua-bitop (focal)Fixed in: 1.0.2-5ubuntu0.20.04.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: lua-cjson (focal)Fixed in: 2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: lua5.1 (focal)Fixed in: 5.1.5-8.1ubuntu0.20.04.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: lua-bitop (jammy)Fixed in: 1.0.2-5ubuntu0.22.04.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: lua-cjson (jammy)Fixed in: 2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: lua5.1 (jammy)Fixed in: 5.1.5-8.1ubuntu0.22.04.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: redis (noble)Fixed in: 5:7.0.15-1ubuntu0.24.04.4
ubuntupatch availablevia ubuntu_usn
Product: redis (xenial)Fixed in: 2:3.0.6-1ubuntu0.4+esm5
ubuntupatch availablevia ubuntu_usn
Product: redis (bionic)Fixed in: 5:4.0.9-1ubuntu0.2+esm7
ubuntupatch availablevia ubuntu_usn
Product: lua5.1 (xenial)Fixed in: 5.1.5-8ubuntu1+esm1

Vendor Advisories (6)

ubuntuUSN-8262-1

Lua vulnerability

May 8, 2026
ubuntuUSN-8169-1

Redis, Lua vulnerabilities

Apr 13, 2026
sophosllm-sophos-8de9cab97822bb0eCRITICAL

Remote code execution vulnerability in open-source Valkey and Redis

Oct 21, 2025
microsoft2025-Oct/CVE-2025-49844Critical

Redis Lua Use-After-Free may lead to remote code execution

Oct 14, 2025
redhatCVE-2025-49844Important

Redis: Redis Lua Use-After-Free may lead to remote code execution

Oct 3, 2025
netgearllm-netgear-5dc7d23a3353dec6CRITICAL

Remote Code Execution vulnerability in Valkey and Redis affecting Memorystore

References

github.com / lastvocher/redis-CVE-2025-49844
openwall.com / lists/oss-security/2025/10/07/2
Mailing ListThird Party Advisory
github.com / redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539
Patch
github.com / redis/redis/releases/tag/8.2.2
Release Notes
github.com / redis/redis/security/advisories/GHSA-4789-qfc9-5f9q
Third Party Advisory