Redis 7.x — End of Life

Active High risk
3 releases in this series8 CVEs

Redis 7.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
7.4Jul 29, 2024May 2, 2025No7.4.9Active
7.2Aug 15, 2023Jul 29, 2024No7.2.14Active
7.0Apr 27, 2022Aug 15, 2023Jul 29, 20247.0.15EOL

CVEs affecting Redis 7.x (8)

CVESeverityCVSSEPSSKEVCycleDescriptionPublished
CVE-2026-25243HIGH8.80.11%7.0Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not proper…May 5, 2026
CVE-2026-25243HIGH8.80.11%7.2Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not proper…May 5, 2026
CVE-2026-25243HIGH8.80.11%7.4Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not proper…May 5, 2026
CVE-2026-23631HIGH8.10.09%7.4Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacke…May 5, 2026
CVE-2026-23631HIGH8.10.09%7.2Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacke…May 5, 2026
CVE-2026-23631HIGH8.10.09%7.0Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacke…May 5, 2026
CVE-2026-23479HIGH8.80.12%7.4Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not han…May 5, 2026
CVE-2026-23479HIGH8.80.12%7.2Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not han…May 5, 2026

Redis 7.x will reach end of life — migrate to Redis 8.x

Redis 8.x is the next major release. Plan your upgrade before Redis 7.x stops receiving security patches.

See Redis 8.x

Frequently asked questions

Is Redis 7 end of life?

Partially. Some Redis 7.x releases have reached EOL. Check the version table above for the exact status of each sub-release.

What CVEs affect Redis 7?

There are 8 CVEs tracked for Redis 7.x. See the full list above with CVSS and EPSS scores.

What is the latest Redis 7 version?

The latest Redis 7.x patch release is 7.4.9, released on May 5, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Redis 7 to Redis 8?

To migrate from Redis 7 to Redis 8: (1) review the official Redis 8 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Redis 7 in production?

Redis 7 is still supported and safe for production use. Ensure you are running the latest patch version (7.4.9) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA