#lua-scripting

#lua-scripting

Authenticated attackers can exploit a Lua-related use-after-free in Redis (CVE-2025-49844) to achieve remote code execution; apply patches and restrict Lua execution immediately.

A 13-year-old Lua scripting flaw in Redis (CVE-2025-49844) lets authenticated users trigger use-after-free and potential remote code execution; patch self-managed instances immediately.