Redis Ships Seven Updates After Kimi K3 Finds Critical Flaw

Redis is a widely deployed open-source database used for caching, real-time data processing and application back ends, making flaws in its core software potentially consequential across cloud and enterprise systems. Security researchers identified a critical vulnerability capable of enabling remote code execution with help from Kimi K3, an AI agent developed by Moonshot AI. The discovery underscores the growing role of artificial intelligence in automating security research and uncovering weaknesses in widely used infrastructure.

Redis responded by releasing seven patched versions, including Redis 6.2.23 and 7.2.15, to address the remote-code-execution risk. The company urged users to update promptly, particularly where Redis services are exposed to external networks or handle sensitive workloads. No confirmed exploitation or specific attack timeline was disclosed in the event information, but organizations should inventory affected deployments, apply the relevant release and review network exposure and system activity for signs of compromise.