Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

The Hacker News 24 July 2026, 09:58 EEST Security Hosting

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution. Redis 6.2.23, 7.2.15, and…

Read the full story on The Hacker News https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html

The difference between an incident and an ordinary day is usually a backup somebody had tested. CrockyHost hosting keeps daily copies and can restore them in minutes.

Keep reading

The Network Has Become the Control Plane for AI Security The Hacker News
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts The Hacker News
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation The Hacker News
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data The Hacker News