CVE Feed

    Dashboard / CVE / CVE-2025-46817

    CVE-2025-46817

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.

    Published:Oct 3, 2025
    Last Modified:Jan 27, 2026
    EPS:Oct 3, 2025
    EPSS Score:0.27211
    CVSS Score:7

    Affected Products

    Vendor
    Redis
    Product
    Redis

    Exploits

    https://github.com/dwisiswant0/CVE-2025-46817https://github.com/slayerkkkk/CVE-2025-46817-PoC

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-81934 (CVSS 7.5) — Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS…
    CVE-2026-72568 (CVSS 7.1) — Red Hat CNA-LR concluded that this CVE is not valid.…
    CVE-2026-66373 (CVSS 7.5) — Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote cod…
    CVE-2026-25243 (CVSS 7.7) — Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does …
    CVE-2026-23631 (CVSS 6.1) — Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticat…
    CVE-2026-23479 (CVSS 7.7) — Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow do…
    CVE-2025-62507 (CVSS 7.7) — Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run…
    CVE-2025-49844 (CVSS 9.9) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46819 (CVSS 6.3) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46818 (CVSS 6) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High