High severity7.0NVD Advisory· Published Oct 3, 2025· Updated Jun 17, 2026

CVE-2025-46817

Description

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redis/Redis3 versions
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*range: <6.2.20
- (no CPE)range: <=8.2.1
- (no CPE)range: < 8.2.2
osv-coords44 versions
pkg:apk/chainguard/py3-redis pkg:apk/chainguard/py3.10-redis pkg:apk/chainguard/py3.11-redis pkg:apk/chainguard/py3.12-redis pkg:apk/chainguard/py3.13-redis pkg:bitnami/keydb pkg:bitnami/redis pkg:bitnami/valkey pkg:rpm/almalinux/redis pkg:rpm/almalinux/redis-devel pkg:rpm/almalinux/redis-doc pkg:rpm/almalinux/valkey pkg:rpm/almalinux/valkey-devel pkg:rpm/opensuse/redis&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/redis&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/redis&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/redis7&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/valkey&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/valkey&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/valkey&distro=openSUSE%20Tumbleweed pkg:rpm/suse/redis&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/redis&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/redis7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/valkey&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/valkey&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7 pkg:rpm/suse/valkey&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/valkey&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
< 0+ 43 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.2.20
- (no CPE)range: < 6.2.20
- (no CPE)range: < 7.2.11
- (no CPE)range: < 6.2.20-1.el9_6
- (no CPE)range: < 6.2.20-1.el9_6
- (no CPE)range: < 6.2.20-1.el9_6
- (no CPE)range: < 8.0.6-1.el10_0
- (no CPE)range: < 8.0.6-1.el10_0
- (no CPE)range: < 7.2.4-150600.3.18.1
- (no CPE)range: < 8.2.3-bp160.1.1
- (no CPE)range: < 8.2.2-1.1
- (no CPE)range: < 7.0.8-150600.8.19.1
- (no CPE)range: < 8.0.6-150600.13.17.1
- (no CPE)range: < 8.0.6-160000.1.1
- (no CPE)range: < 8.1.4-1.1
- (no CPE)range: < 6.0.14-150200.6.43.1
- (no CPE)range: < 6.0.14-150200.6.43.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 7.2.4-150600.3.18.1
- (no CPE)range: < 6.0.14-150200.6.43.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.0.14-150200.6.43.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 6.2.6-150400.3.40.1
- (no CPE)range: < 7.0.8-150500.3.24.1
- (no CPE)range: < 7.0.8-150500.3.24.1
- (no CPE)range: < 7.0.8-150600.8.19.1
- (no CPE)range: < 7.0.8-150500.3.24.1
- (no CPE)range: < 7.0.8-150500.3.24.1
- (no CPE)range: < 8.0.6-150600.13.17.1
- (no CPE)range: < 8.0.6-150700.3.11.1
- (no CPE)range: < 8.0.6-160000.1.1
- (no CPE)range: < 8.0.6-160000.1.1

Patches

Vulnerability mechanics

References

github.com/redis/redis/commit/fc9abc775e308374f667fdf3e723ef4b7eb0e3canvdPatch
github.com/redis/redis/security/advisories/GHSA-m8fj-85cg-7vhpnvdVendor Advisory
github.com/redis/redis/releases/tag/8.2.2nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000