Kimi K3 uncovers Redis zero‑days, forcing urgent patches
Researchers behind Kimi K3 discovered four authenticated RCE chains in Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0, all requiring the RESTORE command. The bugs enable arbitrary code execution via Streams, EVAL, or RedisBloom, prompting seven security releases and urgent mitigation steps like disabling RESTORE.