Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade redis-develUpgrade valkey-develUpgrade redis-docUpgrade valkeyUpgrade redis | Oct 11, 2026 | Sep 8, 2026 |
| Debian | — | Upgrade redis | Aug 9, 2026 | Aug 9, 2026 |
| Oracle_linux | — | Upgrade redis-docUpgrade valkeyUpgrade redis-develUpgrade redisUpgrade valkey-devel | Oct 22, 2026 | Jul 25, 2026 |
| Redhat_linux | — | Upgrade valkey-debugsourceUpgrade redis-docUpgrade valkey-develUpgrade redis-debuginfoUpgrade valkey-debuginfoUpgrade redisUpgrade valkeyUpgrade redis-develUpgrade redis-debugsource | Aug 17, 2026 | Jul 25, 2026 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 8.8.0 | Aug 12, 2026 | Jul 25, 2026 |
| Rocky_linux | — | Upgrade redis-debugsourceUpgrade valkey-develUpgrade redis-debuginfoUpgrade redis-develUpgrade redisUpgrade valkey-debugsourceUpgrade valkeyUpgrade valkey-debuginfo | Sep 10, 2026 | Sep 9, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub