ShellCodeX Intelligence Brief
CRITICAL
Vulnerabilities
Kimi K3 agents identify Redis authenticated RCE zero-days via RESTORE chains
Source headline: Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
Threat level
Critical
Signal strength
85/100
Source confidence
1 source
Published
17 hours ago
Intelligence Summary
Researchers say Kimi K3 agents uncovered Redis zero-day issues that enable authenticated remote code execution. The published proof-of-concept works against several Redis 6.2, 7.4, 8.6, and 8.8 builds. Exploitation requires specific Redis commands such as RESTORE, and in some cases EVAL and XGROUP, plus RedisBloom for 8.8.0. Redis issued multiple security releases on July 23 to address the memory-corruption risk. Administrators should upgrade promptly and review exposed Redis instances for signs of exploitation.
Recommended Action
Prioritize immediate review, validate exposure, and patch or mitigate affected systems.
Topics
Original reporting
The Hacker News
Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
Open original source