Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade valkeyUpgrade redisUpgrade redis-docUpgrade valkey-develUpgrade redis-devel | Oct 11, 2026 | Sep 8, 2026 |
| Debian | — | Upgrade redis | Aug 9, 2026 | Aug 9, 2026 |
| Oracle_linux | — | Upgrade valkey-develUpgrade valkeyUpgrade redis-develUpgrade redisUpgrade redis-doc | Oct 22, 2026 | Jul 25, 2026 |
| Redhat_linux | — | Upgrade redis-debuginfoUpgrade redis-develUpgrade redis-debugsourceUpgrade redisUpgrade valkey-debuginfoUpgrade valkeyUpgrade valkey-develUpgrade redis-docUpgrade valkey-debugsource | Aug 17, 2026 | Jul 25, 2026 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 8.8.0 | Aug 12, 2026 | Jul 25, 2026 |
| Rocky_linux | — | Upgrade valkey-debugsourceUpgrade valkey-debuginfoUpgrade valkeyUpgrade redisUpgrade redis-debugsourceUpgrade redis-debuginfoUpgrade redis-develUpgrade valkey-devel | Sep 10, 2026 | Sep 9, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub