Redis 8.8.1

Redis 8.8.1 has been released on July 23, 2026 — a security patch addressing a critical vulnerability in RedisBloom and TDigest modules.

Security Fix

This release fixes a security issue where crafted RESTORE payloads in RedisBloom and TDigest could trigger out-of-bounds writes, potentially leading to remote code execution. All users running Redis with the Bloom or TDigest modules should upgrade immediately.

Upgrade Urgency: SECURITY

The Redis team has marked this as SECURITY level urgency, meaning there are security fixes that affect most users and an upgrade is strongly recommended as soon as possible.

The vulnerability (P1044) affects the RedisBloom module's RESTORE command handling. Crafted payloads can exploit this to write outside allocated memory bounds, opening the door for remote code execution in production environments.

What's Included

• Security — Fix for out-of-bounds writes in RedisBloom/TDigest RESTORE payloads
• Stability — No feature changes, purely a security-focused release

How to Update

Upgrade your Redis instance using your package manager or by downloading the latest source from redis.io:

• Linux (apt): sudo apt update && sudo apt upgrade redis
• macOS (Homebrew): brew upgrade redis
• Source: Download from download.redis.io

If you're running Redis with the RedisBloom or TDigest modules, this upgrade is critical. Test in your staging environment first, then deploy to production.