Critical Flaw Exposes 60,000 Redis Servers to Remote Exploitation

A critical, 10.0-scored vulnerability (CVE-2025-49844, “RediShell”) in Redis’s embedded Lua scripting engine enables authenticated attackers to escape the Lua sandbox and execute arbitrary code; Wiz and Redis disclosed fixes after finding ~330,000 internet-exposed instances (about 60,000 unauthenticated), and administrators are urged to patch immediately, enable auth/restrict access, disable Lua if unused, run non-root, and monitor for suspicious activity to prevent possible credential theft, lateral movement, or deployment of miners/ransomware.