A Redis flaw, CVE-2025-49844, exposes 75% of cloud systems to remote code execution, data theft, and full system compromise.| eSecurity Planet
Overview Recently, NSFOCUS CERT detected that Redis issued a security bulletin and fixed the Redis Lua code execution vulnerability (CVE-2025-49844); Because Redis’s Lua script engine has a use-after-free reuse vulnerability when handling memory management, an authenticated attacker can write a specially crafted Lua script to manipulate the memory recycling mechanism and execute the Lua script […] The post Redis Lua Code Execution Vulnerability (CVE-2025-49844) Notice appeared first on NS...| NSFOCUS, Inc., a global network and cyber security leader, protects enterpris...