REDHAT-BUG-2525226: Use After Free

Q: Which Redis deployments are exposed?

The vulnerable code handles the TLS pending-data list, so exposure depends on Redis being configured with TLS support. The issue is described as remotely exploitable without authentication.

Q: What level of access does an attacker need?

An attacker may be able to exploit the issue remotely without authentication. Successful exploitation may allow arbitrary commands to run with the privileges of the Redis server process.

Q: Which Redis releases contain fixes?

Fixes are available in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published Aug 27, 2026

Updated

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Affected Software

1 affected component

Redis redis<8.2.9, <8.4.6, <8.6.6, <8.8.2, <8.10.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Redis to a version that resolves this vulnerability.
Fixed in 8.2.9
Upgrade
Upgrade Redis to a version that resolves this vulnerability.
Fixed in 8.4.6
Upgrade
Upgrade Redis to a version that resolves this vulnerability.
Fixed in 8.6.6
Upgrade
Upgrade Redis to a version that resolves this vulnerability.
Fixed in 8.8.2
Upgrade
Upgrade Redis to a version that resolves this vulnerability.
Fixed in 8.10.1

Event History

Aug 27, 2026

Data Sourced

via Red Hat·08:18 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Redis deployments are exposed?

The vulnerable code handles the TLS pending-data list, so exposure depends on Redis being configured with TLS support. The issue is described as remotely exploitable without authentication.

What level of access does an attacker need?

An attacker may be able to exploit the issue remotely without authentication. Successful exploitation may allow arbitrary commands to run with the privileges of the Redis server process.

Which Redis releases contain fixes?

Fixes are available in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

REDHAT-BUG-2525226: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Redis deployments are exposed?

What level of access does an attacker need?

Which Redis releases contain fixes?

Company

Resources

Contact

Frequently Asked Questions

Which Redis deployments are exposed?

What level of access does an attacker need?

Which Redis releases contain fixes?