New Kimi K3 AI Agent Uncovers 0-Day Exploits in Redis Server

Research tied to the Kimi K3 AI agent discloses multiple authenticated RCE vectors in Redis: a shared-NACK double-free affecting 6.2.22, 7.4.9, and 8.6.4, and a TDigest heap overflow in the bundled RedisBloom module on 8.8.0. Both attack paths require commonly enabled admin commands (EVAL, RESTORE, XGROUP) and valid credentials; the issues can yield host-level shells without crashing the service. The report urges rapid patching, command restriction/ACLs, network isolation, credential hygiene, module auditing, and monitoring while warning that 8.8.0 is not automatically safe until RedisBloom is fixed.