Executive Summary
Researchers say Kimi K3 agents found Redis zero-days and built authenticated RCE exploits for stock Redis 6.2.22, 7.4.9, 8.6.4 and 8.8.0; Redis shipped seven security releases on July 23.
What Happened
Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution. Redis 6.2.23, 7.2.15, and 7.4.10
Affected Products
- Redis
Vulnerability / Attack Technique
AI-discovered memory flaws leading to RCE
Technical Mechanism
The exploit chains need RESTORE, and some EVAL, XGROUP or RedisBloom; the underlying memory bugs may allow remote code execution.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
AI agents found exploitable bugs in core infrastructure. RealGround analysis: Redis behind AI apps (caches, vector stores) must be patched and access-restricted.
Recommended Controls
- Upgrade Redis to the fixed releases
- Disable or restrict RESTORE and EVAL
- Require authentication and keep Redis off public networks
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.