Kimi K3 AI Agents Discover Redis Zero-Days and Build RCE Exploit
Redis released seven security updates after researchers published authenticated RCE Proof-of-Concepts for stock Redis versions 6.2.22, 7.4.9, 8.6.4, and 8.8.0. The underlying memory flaws, which could lead to remote code execution, were reportedly discovered by Kimi K3 AI agents. All four exploit chains require the RESTORE command, with some also needing EVAL and XGROUP or the RedisBloom module, demonstrating AI’s growing capability in vulnerability research.