# Security Advisory: CVE-2022-24735 Redis™

[Blog](/blog/)&gt;[Technology](/blog/category/technical/)&gt;Security Advisory: CVE-2022-24735 Redis™ 

Security Advisory: CVE-2022-24735 Redis™
========================================

June 30, 2022 | By [ Carrie Powick](https://www.instaclustr.com/blog/author/carrie-powick/)

 

 

 

 



   [ ](https://x.com/intent/tweet?text=Security%20Advisory:%20CVE-2022-24735%20Redis%E2%84%A2&url=https://www.instaclustr.com/blog/security-advisory-cve-2022-24735-redis/) [ ](https://www.linkedin.com/shareArticle?mini=true&url=https://www.instaclustr.com/blog/security-advisory-cve-2022-24735-redis/&title=&summary=Security%20Advisory:%20CVE-2022-24735%20Redis%E2%84%A2&source=) 

Soon after the publication of [CVE-2022-24735](https://nvd.nist.gov/vuln/detail/CVE-2022-24735), Instaclustr began investigating its potential impact on our Redis™ offering. This vulnerability allows weaknesses in the Lua script execution environment to be exploited. An attacker with access to vulnerable versions could inject Lua code to be run by a user with high privileges.

We believe this vulnerability is not exploitable under our managed service, due to the ACLs that we apply to our standard users. However, due to the severity of the vulnerability, we decided that releasing the newer version of Redis was the best course of action. Redis 6.2.7 contains the fix and is now available on the Instaclustr Managed Platform. We recommend our customers running Redis 6.2.6 upgrade to this newer version. To do so, please get in touch with us via our support website.

Mitigation:

- We recommend upgrading to Redis 6.2.7.

If you have any further queries regarding this vulnerability and how it relates to Instaclustr services, please contact <support@instaclustr.com>.

References: <https://nvd.nist.gov/vuln/detail/CVE-2022-24735>

Instaclustr for Redis™ provides a fully managed service for Redis—SOC 2 certified and hosted in the cloud.

[Get Started](https://console2.instaclustr.com/signup)

 

 

 



 

 ![mail icon]()#### Get the latest articles for open sourceIn your inbox

 <a class="btn btn-primary btn-popup text-dark" href="">Sign up now</a> 

 

 

 

  ### Related content

 [ Instaclustr Announces the General Availability of Instaclustr for Redis™ on Graviton 2 

 

 Instaclustr is pleased to announce the general availability of Instaclustr for Redis on Graviton 2 processors. These processors ... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/general-availability-of-instaclustr-for-redis-on-graviton-2/) 

 [ Redis Mirroring Is Now Generally Available 

 

 Redis Mirroring provides the ability to lower latencies and build cache architectures resilient to cloud region failures. Want to ... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/redis-mirroring-is-now-generally-available/) 

 [ Redis™ 6.2.6 and Customer-Initiated Resize Are Now Generally Available 

 

 Instaclustr is pleased to announce the GA of Redis version 6.2.6 on our Platform as well as a new feature called Customer-... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/redis-6-2-6-and-customer-initiated-resize-are-now-generally-available/) 

 

  <a class="close-modal" href="">×</a>Sign upto ourNewsletter
-----------------------
