RedisTimeSeries is a time-series module for Redis.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 5, 2026 · NIST NVD

   Detected

   RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may l

2. Jul 25, 2026 · NIST NVD

   Updated

   RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may l

Affected

• cpe redistimeseries/redistimeseriesversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-25588

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-25588

  RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with

  nvd.nist.gov

References

• Patch · github.com
• Mitigation · github.com