Critical Redis Vulnerabilities Enable Remote Code Execution Attacks

Redis published an advisory for five security flaws (CVE-2026-23479, CVE-2026-25243, CVE-2026-25588, CVE-2026-25589, CVE-2026-23631) — four High-severity RCE-capable issues and one Medium-rated Lua use-after-free — affecting Redis OSS/CE, Redis Software, and module extensions (RedisTimeSeries, RedisBloom). The advisory lists technical details and researchers, provides fixed versions across supported branches and module updates, and urges immediate upgrades, network restrictions, authentication hardening, and monitoring because exploitation (which requires authenticated access) could result in full system compromise, data exfiltration, or service disruption.