CVE-2025-46686

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this is disputed by the Supplier because abuse of the commands network protocol is not a violation of the Redis Security Model.

• CWE-401

• https://github.com/io-no/CVE-Reports/issues/1
• https://github.com/redis/redis
• https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9

Published

Jul 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-46674NASA CryptoLib before 1.3.2 uses Extended Procedures that ar…9.9
• CVE-2025-46675In NASA CryptoLib before 1.3.2, the key state is not checked…4.2
• CVE-2025-46676Dell PowerProtect Data Domain with Data Domain Operating Sys…4.9
• CVE-2025-4668Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-46684Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, …5.5
• CVE-2025-46685Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, …7.8
• CVE-2025-46687quickjs-ng through 0.9.0 has a missing length check in JS_Re…7.8
• CVE-2025-46688quickjs-ng through 0.9.0 has an incorrect size calculation i…8.4
• CVE-2025-46689Ververica Platform 2.14.0 contain an Reflected XSS vulnerabi…6.1
• CVE-2025-4669The WP Booking Calendar plugin for WordPress is vulnerable t…5.4
• CVE-2025-46690Ververica Platform 2.14.0 allows low-privileged users to acc…8.8
• CVE-2025-46691Dell PremierColor Panel Driver, versions prior to 1.0.0.1 A0…7.8