PT-2026-37086 · Redis+1 · Redis-Server+2

Yoni Shiraz · Published 2026-05-05 · Updated 2026-06-11 · CVE-2026-23631

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions redis-server versions prior to 8.6.3

Description An authenticated attacker can exploit the master-replica synchronization mechanism in redis-server to trigger a use-after-free condition on replicas where the replica-read-only setting is disabled or can be disabled. This issue, which involves the Lua script interpreter, may lead to remote code execution.

Recommendations Update to version 8.6.3. Prevent users from executing Lua scripts as a temporary workaround. Avoid using replicas where replica-read-only is disabled.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2026:25219

BDU:2026-06451

BIT-KEYDB-2026-23631

BIT-REDIS-2026-23631

BIT-VALKEY-2026-23631

CVE-2026-23631

OESA-2026-2237

OPENSUSE-SU-2026:10711-1

OPENSUSE-SU-2026:10719-1

RHSA-2026:25216

RHSA-2026:25219

Affected Products

Redis

Rocky Linux

Redis-Server

References · 57

• 🔥 https://github.com/mgiay/CVE-2026-25589-25588-25243-23631-23479-REDIS · Exploit
• https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-keydb-2026-23631 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:25925 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10719-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/731778 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23631 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-valkey-2026-23631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25243 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-25219.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23479 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23631 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2026-23631 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-redis-2026-23631 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23631 · Vendor Advisory