Skip to main content
Connecting…
CVE-2026-66373VulnerabilityPublished 07/25/2026Updated 10/17/2026

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload… (CVE-2026-66373)

Affects redisSource GCVE Database

0
CVSS 3.1 base score
7.5Medium
Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.8% chance of exploitation in 30 days – higher than 58% of CVEs
Patch
Available – fixed in 8.8.0
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What to do

Affected software

ProductAffectedFixed in
GitHub Actionsredis/redispkg:github/redis/redisOther threatsAffected
  • <8.8.0
Fixed in
  • 8.8.0
Ubuntu:Pro:14.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=esm-infra-legacy/trustyOther threatsAffected
  • =2:2.6.13-1
  • =2:2.6.16-3
  • =2:2.8.0-1
  • =2:2.8.2-1
  • =2:2.8.4-2
  • =2:2.8.4-2ubuntu0.2
  • =2:2.8.4-2ubuntu0.2+esm1
  • =2:2.8.4-2ubuntu0.2+esm2
  • =2:2.8.4-2ubuntu0.2+esm3
  • =2:2.8.4-2ubuntu0.2+esm4
  • =2:2.8.4-2ubuntu0.2+esm5
Fixed in–
Ubuntu:Pro:16.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=esm-apps/xenialOther threatsAffected
  • =2:3.0.3-3
  • =2:3.0.5-1
  • =2:3.0.5-2
  • =2:3.0.5-3
  • =2:3.0.5-4
  • =2:3.0.6-1
  • =2:3.0.6-1ubuntu0.2
  • =2:3.0.6-1ubuntu0.3
  • =2:3.0.6-1ubuntu0.4
  • =2:3.0.6-1ubuntu0.4+esm1
  • =2:3.0.6-1ubuntu0.4+esm2
  • =2:3.0.6-1ubuntu0.4+esm3
  • =2:3.0.6-1ubuntu0.4+esm4
  • =2:3.0.6-1ubuntu0.4+esm5
Fixed in–
Ubuntu:Pro:18.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=esm-apps/bionicOther threatsAffected
  • =4:4.0.1-7
  • =4:4.0.2-6
  • =4:4.0.2-9
  • =5:4.0.5-1
  • =5:4.0.6-1
  • =5:4.0.6-2
  • =5:4.0.7-1
  • =5:4.0.8-1
  • =5:4.0.8-2
  • =5:4.0.9-1
  • =5:4.0.9-1ubuntu0.1
  • =5:4.0.9-1ubuntu0.2
  • =5:4.0.9-1ubuntu0.2+esm2
  • =5:4.0.9-1ubuntu0.2+esm3
  • =5:4.0.9-1ubuntu0.2+esm4
  • =5:4.0.9-1ubuntu0.2+esm5
  • =5:4.0.9-1ubuntu0.2+esm6
  • =5:4.0.9-1ubuntu0.2+esm7
Fixed in–
Ubuntu:Pro:20.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=esm-apps/focalOther threatsAffected
  • =5:5.0.5-2build1
  • =5:5.0.6-1
  • =5:5.0.7-1
  • =5:5.0.7-2
  • =5:5.0.7-2ubuntu0.1~esm1
  • =5:5.0.7-2ubuntu0.1
  • =5:5.0.7-2ubuntu0.1+esm1
  • =5:5.0.7-2ubuntu0.1+esm2
  • =5:5.0.7-2ubuntu0.1+esm3
  • =5:5.0.7-2ubuntu0.1+esm4
Fixed in–
Ubuntu:Pro:22.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=esm-apps/jammyOther threatsAffected
  • =5:6.0.15-1
  • =5:6.0.16-1
  • =5:6.0.16-1build1
  • =5:6.0.16-1ubuntu1
  • =5:6.0.16-1ubuntu1+esm1
  • =5:6.0.16-1ubuntu1+esm2
  • =5:6.0.16-1ubuntu1.1
  • =5:6.0.16-1ubuntu1.1+esm1
  • =5:6.0.16-1ubuntu1.2
  • =5:6.0.16-1ubuntu1.2+esm1
Fixed in–
Ubuntu:24.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=nobleOther threatsAffected
  • =5:7.0.12-1
  • =5:7.0.14-1
  • =5:7.0.14-2
  • =5:7.0.15-1
  • =5:7.0.15-1build1
  • =5:7.0.15-1build2
  • =5:7.0.15-1ubuntu0.24.04.1
  • =5:7.0.15-1ubuntu0.24.04.2
  • =5:7.0.15-1ubuntu0.24.04.3
  • =5:7.0.15-1ubuntu0.24.04.4
  • =5:7.0.15-1ubuntu0.24.04.5
Fixed in–
Ubuntu:26.10redispkg:deb/ubuntu/redis?arch=source&distro=stonkingOther threatsAffected
  • =5:8.0.5-1
  • =5:8.0.6-2
  • =5:8.0.6-2build1
  • =5:8.0.6-3
Fixed in–
Ubuntu:26.04:LTSredispkg:deb/ubuntu/redis?arch=source&distro=resoluteOther threatsAffected
  • =5:8.0.2-3build1
  • =5:8.0.2-3ubuntu0.25.10.1
  • =5:8.0.5-1
  • =5:8.0.5-1ubuntu0.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Red Hat has released updated RPM packages for their Hardened Images that fix this vulnerability. Users should apply these official updates as provided by Red Hat. Since this is a vulnerability in Redis versions prior to 8.8.0, upgrading to version 8.8.0 or later also mitigates the issue. No additional mitigation steps are indicated by the vendor advisory.

Description

Redis versions prior to 8.8.0 contain a critical vulnerability (CVE-2026-66373) that allows remote code execution via a specially crafted RESTORE payload when an attacker is authenticated and can execute the RESTORE command. This issue is addressed in updated RPM packages provided by Red Hat for their Hardened Images. The vulnerability has a CVSS score of 7.5, indicating a medium severity level.

Summary

CVE-2026-66373 is a remote code execution vulnerability in Redis before version 8.8.0. It arises in the unusual scenario where an authenticated attacker can execute the RESTORE command with a crafted payload, enabling execution of arbitrary code remotely. Red Hat has issued security advisories and updated RPM packages for their Hardened Images to remediate this and related vulnerabilities. The vulnerability has a CVSS 3.1 base score of 7.5, with attack vector network, high attack complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability.

Impact

Successful exploitation of this vulnerability allows an authenticated attacker to execute arbitrary code remotely on the affected Redis server, potentially leading to full compromise of the system running Redis. The vulnerability affects confidentiality, integrity, and availability of the system.

Weaknesses

References

Community reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.

Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.