Redis Security Update Advisory (CVE-2026-25243)

Overview

A security update has been released addressing a post-authentication remote code execution vulnerability (CVE-2026-25243) in Redis caused by an invalid memory access.

Affected Parties

• Redis OSS/CE versions: All Redis OSS/CE releases. – Redis Software versions: 8.0.6 or earlier.

Solution Details

The latest update includes a Vulnerability Patch.

Specified Update Version

• Redis OSS/CE: 6.2.22.
• Redis OSS/CE: 7.2.14.
• Redis OSS/CE: 7.4.9.
• Redis OSS/CE: 8.2.6.
• Redis OSS/CE: 8.4.3.
• Redis OSS/CE: 8.6.3.
• Redis Software: 7.2.4-153.
• Redis Software: 7.4.6-279.
• Redis Software: 7.8.6-253.
• Redis Software: 7.22.2-79.
• Redis Software: 8.0.10-64.

Note

Follow the instructions on the reference website to update to the latest version that includes the Vulnerability Patches.