
- Redis patches CVE-2025-49844, a critical bug enabling remote code execution via Lua script abuse
- Vulnerability had existed for 13 years; affects versions 8.2.1 and below, now fixed in 8.2.2
- Over 60,000 exposed instances lack authentication; urgent updates and ACL restrictions are strongly advised
Redis, a popular open source data store, carried a critical vulnerability that allowed threat actors to execute malicious code remotely. It has been fixed in its newest version, which users are now urged to install.