RCE via RESTORE patched; Cuckoo Filter data loss fixed
v8.4.5
2 fixesThis release2 fixesBug fixesAI-tallied from the release notes
SECURITY: There are security fixes in the release.
Security fixes
- Use-after-free when loading a stream consumer group via
RESTOREmay lead to Remote Code Execution - RedisBloom/RedisBloom#1039 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
Bug fixes
- RedisBloom/RedisBloom#1020 Replicate
CF.LOADCHUNKdata chunks to prevent silent Cuckoo Filter data loss on failover
Fetched July 23, 2026
