CVE-2025-46818

CVE-2025-46818 – Redis Lua サンドボックスのクロスユーザーエスケープ 非推奨のLua APIと変更可能なメタテーブルを介した、Redis 8.2.1におけるサンドボックスエスケープ。 概要 Redis 8.2.1は、非推奨のLua組み込み関数（getfenv、setfenv、newproxy）をスクリプトに公開したままにしており、基本型のメタテーブルをロックできていません。攻撃者は共有メタテーブルにメソッドを注入し、特権環境を取得して、別のユーザーの権限でコマンドを実行できます。 環境 Redisサーバー 8.2.1（または8.2.2より前の脆弱性のあるリリース...

CVE-2022-0543

CVE-2022-0543 - Redis Lua サンドボックスエスケープによるリモートコード実行 Debian/Ubuntu CVE-2022-0543 は、DebianベースのLinuxディストリビューション （DebianやUbuntuを含む）上のRedisに影響を与える重大なセキュリティ脆弱性です。この脆弱性はパッケージングの欠陥に起因し、Luaサンドボックスエスケープ を引き起こします。その結果、影響を受けるシステム上でリモートコード実行（RCE）が可能になります。 アップストリームのRedis自体は脆弱ではありません —...

CVE-2022-0543

CVE-2022-0543 Luaサンドボックスエスケープ脆弱性を介したRedis RCEの完全なエクスプロイト。参照元: https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. 特徴: 自動リバースシェル -I + -P 単一コマンド実行 -x 基本シェル デフォルト 今後の予定: 誤検知を防ぐためのより良いチェックが必要 免責事項:...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua サンドボックスエスケープ リモートコード実行 CVE‑2022‑0543 — Redis Lua サンドボックスエスケープとは？ この脆弱性は、Debian / Ubuntu パッケージでインストールされた Redis にのみ存在します。 Redis は動的モジュール lua-cjson、lua-bitop を含む Lua エンジンでコンパイルされているため、攻撃者は以下を呼び出すことができます: root@kitploit: package.loadlib これによりシステムの IO...

Astra Linux – Vulnerability in Redis

It was discovered that Redis, a persistent key-value database, due to a packaging issue, is susceptible to a Lua sandbox escape that is specific to Debian. This could lead to remote code execution...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

USN-8732-1 minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...

USN-8732-1: Minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...

Redis-RCE-x-HTB

Redis RCE Toolkit Educational / Authorized Lab Use Only...

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

SUSE CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

DEBIAN-CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196 Luanti has a mod security sandbox escape

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

SUSE CVE-2026-40959

Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod...

CVE-2026-40959

Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod...

CVE-2026-40959

CVE-2026-40959 affects Luanti 5.x prior to 5.15.2. When using LuaJIT, a crafted mod can cause a Lua sandbox escape. The issue is described in multiple sources as Luanti 5 before 5.15.2, with the sandbox escape vulnerability carrying a high impact in CVSS (high confidentiality, integrity, and avai...

PT-2026-33197

Name of the Vulnerable Software and Affected Versions Luanti versions 5.0 through 5.15.1 Description A sandbox escape exists when LuaJIT is used, allowing a crafted mod to execute arbitrary code outside the game engine. Recommendations Update to version 5.15.2...

Fedora 43 : libinput (2026-5aafda8cd8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5aafda8cd8 advisory. libinput 1.30.3, fixes Lua plugin sandbox escape CVE-2026-35093,CVE-2026-35094 Tenable has extracted the preceding description block directly from t...

CVE-2025-41688

CVE-2025-41688 describes a high-privilege RCE via an undocumented method that escapes the LUA sandbox, enabling execution of arbitrary OS commands. Reported impact includes total system compromise with network access as the attack vector and no user interaction required. Affected products noted i...