Search: CVE-2025-46818

Redis versions 7.2.11 and earlier, as well as certain 8.x versions before 8.2.2, contain a vulnerability that allows authenticated users to execute Lua scripts in the context of another user. This issue affects all Redis versions with Lua scripting enabled. The vulnerability is fixed in Redis version 8.2.2. A workaround is to restrict Lua script execution using ACLs by blocking the EVAL and FUNCTION command families.