CVE-2025-62507

HIGH LAB

Redis 8.2.0-8.2.2 - Stack-based Buffer Overflow via XACKDEL Command

Title source: llm

Exploitation Summary

EIP tracks 4 public exploits for CVE-2025-62507. PoCs published by adminlove520, Network-Sec, exploitintel.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2025-62507, a buffer overflow vulnerability in Redis. The PoC demonstrates a stack-based overflow via the XACKDEL command, leading to a crash and potential RCE through a ROP chain.

Description

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.

Exploits (4)

github WORKING POC 2 stars

by adminlove520 · pythonpoc

https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-62507

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2025-62507, a buffer overflow vulnerability in Redis. The PoC demonstrates a stack-based overflow via the XACKDEL command, leading to a crash and potential RCE through a ROP chain.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Redis (version not explicitly specified, but likely 8.2.x based on the diff link)

No auth needed

Prerequisites: Redis server with stream and consumer group configured

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 27, 2026 Full analysis →

nomisec WORKING POC 2 stars

by Network-Sec · poc

https://github.com/Network-Sec/CVE-2025-62507-Buffer-Overflow_PoC

View Code ZIP pw:eip

This repository contains a working proof-of-concept exploit for CVE-2025-62507, a buffer overflow vulnerability in Redis. The exploit demonstrates a crash and potential RCE via a crafted XACKDEL command with malformed stream IDs.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Redis (version not explicitly specified, but likely 8.2.x based on the diff reference)

No auth needed

Prerequisites: Network access to Redis server · Redis server with vulnerable version

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

github WORKING POC 1 stars

by exploitintel · pythonpoc

https://github.com/exploitintel/eip-pocs-and-cves/tree/main/CVE-2025-62507

View Code ZIP pw:eip

This repository contains a functional exploit for CVE-2025-62507, a stack-based buffer overflow in Redis 8.2.x via the XACKDEL command. It includes multiple Python-based exploit scripts, Docker configurations for reproducible testing, and detailed documentation for setup and execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Redis 8.2.x

No auth needed

Prerequisites: network access to Redis server · Redis 8.2.x with vulnerable XACKDEL implementation

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Mar 04, 2026 Full analysis →

github WORKING POC

by GartonChan · pythonpoc

https://github.com/GartonChan/redis-cve-2025-62507

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2025-62507, a stack buffer overflow in Redis 8.2.0's `xackdelCommand` function. It includes detailed ROP chain implementations for both x86-64 and ARM64 architectures, with supporting documentation and analysis tools.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Redis 8.2.0

No auth needed

Prerequisites: Redis 8.2.0 running with vulnerable configuration · knowledge of target memory addresses (redis_base, libc_base, stack_addr)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Jun 02, 2026 Full analysis →

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://github.com/redis/redis/security/advisories/GHSA-jhjx-x4cf-4vm8

Patch x_refsource_misc

https://github.com/redis/redis/commit/5f83972188f6e5b1d6f1940218c650a9cbdf7741

View Patch ZIP pw:eip

Release Notes x_refsource_misc

https://github.com/redis/redis/releases/tag/8.2.3

Related Analysis

Redis Stack Overflow to RCE

Scores

CVSS v3 8.8

EPSS 0.0018

EPSS Percentile 40.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Lab Environment

EIP LAB

Docker Lab

vulnerable docker pull ghcr.io/exploitintel/cve-2025-62507-vulnerable:latest

View in Library GitHub

Details

CWE

CWE-121 CWE-20 CWE-787

Status published

Products (1)

redis/redis 8.2.0 - 8.2.3

Published Nov 04, 2025

Tracked Since Feb 18, 2026