---
id: 6963
title: "RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score"
cve: CVE-2025-49844
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/wiz-research-redis-rce-cve-2025-49844"
published_at: "2025-10-06T21:00:01Z"
tags: ["rce", "cloud-security", "vulnerability", "redis", "wiz-research", "cve-2025-49844"]
phying_url: "https://phying.com/item/6963"
lang: en
---

# RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score

## Summary

Wiz Research details RediShell (CVE-2025-49844), a Redis RCE rated CVSS 10.0: a 13-year-old use-after-free bug lets an authenticated attacker escape the Lua sandbox and run code on the host.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-49844
- **Published:** 2025-10-06T21:00:01Z
- **Original:** https://www.wiz.io/blog/wiz-research-redis-rce-cve-2025-49844
- **Phying News:** https://phying.com/item/6963