Autonomous AI uncovers two‑year‑old RCE bug in Redis
An autonomous AI tool identified CVE-2026-23479, a two‑year‑old use‑after‑free bug in Redis's blocking‑client code that lets authenticated users run arbitrary OS commands. Redis released patches in May 2026 across several major versions to close the flaw.