Critical Security Update for Redis: CVE-2026-66373 and CVE-2026-81934
Summary
RHSA-2026:69862: Red Hat Security Advisory: redis security update. Affects redis versions < 0:6.2.7-1.el9_2.7. Fixed in 0:6.2.7-1.el9_2.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Redis is an open-source, in-memory data structure store, used as a database, cache, and message broker. It is known for its speed and flexibility, supporting various data structures such as strings, hashes, lists, sets, and more. However, vulnerabilities can compromise its security, making it essential for users to stay updated with the latest patches.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-66373 and CVE-2026-81934 in Redis could allow unauthorized access and manipulation of data. These vulnerabilities arise from insufficient input validation and can lead to data corruption or leakage. Attackers exploiting these vulnerabilities may gain elevated privileges, potentially compromising the integrity and confidentiality of the data stored in Redis.
How To Fix
Minimum fixed version
0:6.2.7-1.el9_2.7
This is the first release that contains the fix.
sudo dnf update redisTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the Redis server by configuring firewall rules to limit connections to trusted IP addresses only. Additionally, consider disabling any unnecessary features that may expose the server to potential attacks.
Conclusion
The Redis vulnerabilities CVE-2026-66373 and CVE-2026-81934 pose significant risks to data integrity and security. It is crucial for users to update to the patched version 0:6.2.7-1.el9_2.7 and implement recommended workarounds to mitigate potential threats.
See every vulnerability recorded for redis →
FAQ
These are identifiers for specific vulnerabilities found in Redis that could allow unauthorized access and manipulation of data.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
Implement firewall rules to restrict access and disable unnecessary features as a temporary workaround until you can apply the update.
You can visit the official Redis documentation or security advisory pages for detailed information on vulnerabilities and updates.
Related vulnerabilities
Recent vulnerabilities recorded for redis.
