> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#4 The Hacker News general July 24, 2026 at 06:58 UTC

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

By [email protected] (The Hacker News)

AI Summary

Kimi K3 AI agents independently discovered zero-day vulnerabilities in Redis and produced working authenticated RCE proof-of-concept exploits targeting stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0 — all requiring the RESTORE command, with some chains also needing EVAL, XGROUP, or the bundled RedisBloom module. Redis shipped seven security releases on July 23, patching to versions 6.2.23, 7.2.15, and 7.4.10. The incident demonstrates that AI-assisted vulnerability discovery is now capable of producing exploitable zero-days in widely deployed infrastructure software.

Read full article → https://thehackernews.com/2026/07/kimi-k3-agents-f…

Relevance score: 84.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  4. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  5. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  6. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  7. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  8. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News