VULNERABILITY INTELLIGENCE

CVE-2025-46817

CVSS score7 HIGH
EPSS probability3.92%
CISA KEVNot currently listed
Published2025-10-03
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.

Weakness classification

  • security-advisories@github.com: CWE-190

Primary references