Vulnerability · Published Oct 3, 2025 · Assigned by GitHub_M
CVE-2025-46818Redis: Authenticated users can execute LUA scripts as a different user
Medium 6.0
In plain English
A medium-severity code injection in redis from redis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | redis | 6.2.20-1.module_el8.10.0+4056+739731b0 | ALSA-2025:19238 |
| AlmaLinux:9 | redis | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:19345 |
| AlmaLinux:9 | redis | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:20955 |
| AlmaLinux:9 | redis | 6.2.20-2.el9_7 | ALSA-2025:20926 |
| AlmaLinux:9 | redis | 6.2.20-1.el9_6 | ALSA-2025:19237 |
| AlmaLinux:8 | redis-devel | 6.2.20-1.module_el8.10.0+4056+739731b0 | ALSA-2025:19238 |
| AlmaLinux:9 | redis-devel | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:19345 |
| AlmaLinux:9 | redis-devel | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:20955 |
| AlmaLinux:9 | redis-devel | 6.2.20-1.el9_6 | ALSA-2025:19237 |
| AlmaLinux:9 | redis-devel | 6.2.20-2.el9_7 | ALSA-2025:20926 |
| AlmaLinux:8 | redis-doc | 6.2.20-1.module_el8.10.0+4056+739731b0 | ALSA-2025:19238 |
| AlmaLinux:9 | redis-doc | 6.2.20-2.el9_7 | ALSA-2025:20926 |
| AlmaLinux:9 | redis-doc | 6.2.20-1.el9_6 | ALSA-2025:19237 |
| AlmaLinux:9 | redis-doc | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:20955 |
| AlmaLinux:9 | redis-doc | 7.2.11-1.module_el9.6.0+188+92104ce8 | ALSA-2025:19345 |
| AlmaLinux:10 | valkey | 8.0.6-2.el10_1 | ALSA-2025:21936 |
| AlmaLinux:10 | valkey | 8.0.6-1.el10_0 | ALSA-2025:19675 |
| AlmaLinux:9 | valkey | 8.0.6-2.el9_7 | ALSA-2025:21916 |
| AlmaLinux:10 | valkey-devel | 8.0.6-1.el10_0 | ALSA-2025:19675 |
| AlmaLinux:10 | valkey-devel | 8.0.6-2.el10_1 | ALSA-2025:21936 |
| AlmaLinux:9 | valkey-devel | 8.0.6-2.el9_7 | ALSA-2025:21916 |
| Alpine:v3.22 | redict | 7.3.6-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.23 | redict | 7.3.6-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.24 | redict | 7.3.6-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.21 | redis | 7.2.11-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.22 | redis | 8.0.4-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.23 | redis | 8.2.2-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.24 | redis | 8.2.2-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.20 | valkey | 7.2.11-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.21 | valkey | 7.2.11-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.22 | valkey | 8.1.4-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.23 | valkey | 8.1.4-r0 | ALPINE-CVE-2025-46818 |
| Alpine:v3.24 | valkey | 8.1.4-r0 | ALPINE-CVE-2025-46818 |
| Debian:14 | redict | 7.3.6+ds-1 | DEBIAN-CVE-2025-46818 |
| Debian:12 | redis | 5:7.0.15-1~deb12u6 | DSA-6020-1 |
| Debian:12 | redis | 5:7.0.15-1~deb12u6 | DEBIAN-CVE-2025-46818 |
| Debian:13 | redis | 5:8.0.2-3+deb13u1 | DEBIAN-CVE-2025-46818 |
| Debian:13 | redis | 5:8.0.2-3+deb13u1 | DSA-6020-1 |
| Debian:14 | redis | 5:8.0.4-1 | DEBIAN-CVE-2025-46818 |
| Debian:13 | valkey | 8.1.1+dfsg1-3+deb13u1 | DEBIAN-CVE-2025-46818 |
| Debian:13 | valkey | 8.1.1+dfsg1-3+deb13u1 | DSA-6022-1 |
| Debian:14 | valkey | 8.1.4+dfsg1-1 | DEBIAN-CVE-2025-46818 |
| Rocky Linux:8 | redis | 0:6.2.20-1.module+el8.10.0+2081+450a296c | RLSA-2025:19238 |
| Rocky Linux:9 | redis | 0:7.2.11-1.module+el9.7.0+40013+17379f63 | RLSA-2025:19345 |
| Rocky Linux:9 | redis | 0:6.2.20-1.el9_6 | RLSA-2025:19237 |
| Rocky Linux:9 | redis | 0:6.2.20-2.el9_7 | RLSA-2025:20926 |
| Rocky Linux:9 | redis | 0:7.2.11-1.module+el9.7.0+40013+17379f63 | RLSA-2025:20955 |
| Rocky Linux:10 | valkey | 0:8.0.6-2.el10_1 | RLSA-2025:21936 |
| Rocky Linux:10 | valkey | 0:8.0.6-1.el10_0 | RLSA-2025:19675 |
| Rocky Linux:9 | valkey | 0:8.0.6-2.el9_7 | RLSA-2025:21916 |
| Ubuntu:25.10 | redict | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:26.10 | redict | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:24.04:LTS | redis | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:25.10 | redis | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:26.04:LTS | redis | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:26.10 | redis | no fix listed | UBUNTU-CVE-2025-46818 |
| Ubuntu:24.04:LTS | valkey | 7.2.11+dfsg1-0ubuntu0.2 | UBUNTU-CVE-2025-46818 |
| Ubuntu:24.04:LTS | valkey | 7.2.11+dfsg1-0ubuntu0.2 | USN-7893-1 |
| Ubuntu:25.10 | valkey | 8.1.4+dfsg1-0ubuntu0.2 | UBUNTU-CVE-2025-46818 |
| Ubuntu:25.10 | valkey | 8.1.4+dfsg1-0ubuntu0.2 | USN-7893-1 |
Affected products (as reported)
Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
References
- https://github.com/redis/redis/security/advisories/GHSA-qrv7-wcrx-q5jp x_refsource_CONFIRM
- https://github.com/redis/redis/commit/45eac0262028c771b6f5307372814b75f49f7a9e x_refsource_MISC
- https://github.com/redis/redis/releases/tag/8.2.2 x_refsource_MISC