CVE-2025-46818

Name of the Vulnerable Software and Affected Versions Redis versions 8.2.1 and below

Description Redis, an in-memory database, has an issue where an authenticated user can use a crafted Lua script to manipulate LUA objects and potentially execute code in another user's context. This affects all versions of Redis with LUA scripting enabled. To mitigate the problem without patching, users can prevent the execution of LUA scripts.

Recommendations Prevent users from executing LUA scripts using Access Control Lists (ACLs) to block the EVAL and FUNCTION command families.