Back to Database
Status published
High
CVE-2025-46817
Lua library commands may lead to integer overflow and potential RCE
Vulnerability Description
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46817
Credits & Attribution
No credits recorded in the NVD database.
References
More from redis
View All →CVE-2025-62507
Redis: Bug in XACKDEL may lead to stack overflow and potential RCE
High
7.7
CVE-2025-49844
Redis Lua Use-After-Free may lead to remote code execution
Critical
10
CVE-2025-48367
Redis DoS Vulnerability due to bad connection error handling
High
7.5
CVE-2025-46819
Redis is vulnerable to DoS via specially crafted LUA scripts
Medium
6.3
CVE-2025-46818
Redis: Authenticated users can execute LUA scripts as a different user
Medium
6
Affected Vendor
redis
View all reports →Affected Software
redis
Vulnerable Versions:
< 8.2.2
Timeline
Official Publish:
October 3rd, 2025
Last Modified:
October 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H