SecurityThe Hacker Newsabout 3 hours ago
Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit
1 min read
Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams shared-NACK use-after-free and RedisBloom TDigest out-of-bounds write flaws may lead to remote code execution. Upgrade to the fixed release for the deployed branch.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
