# Redis 7.4.11

- Product: Redis (https://whatsnew.fyi/product/redis)
- Vendor: Redis
- Date: 2026-08-17
- Version: 7.4.11
- Original notes: https://github.com/redis/redis/releases/tag/7.4.11
- Permalink: https://whatsnew.fyi/product/redis/releases/7.4.11

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix use-after-free in the TLS pending-data list when a command closes another pending connection
- **security** — Fix ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP where validated keys could differ from actually accessed keys
- **security** — Fix out-of-bounds argv access during key extraction when checking ACL permissions of a KEYNUM keyspec command with wrong arity
- **security** — Fix memory corruption during RDB loading from malicious payload with out-of-range SLOT_INFO slot id that may lead to Remote Code Execution
- **security** — Fix use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key

Update urgency: `SECURITY`: There are security fixes in the release.

###### Security fixes

- Use-after-free in the TLS pending-data list when a command closes another pending connection
- #15478 ACL key permission bypass in `SORT`, `GEORADIUS`/`GEORADIUSBYMEMBER` and `XREAD`/`XREADGROUP`: the keys validated by ACL could differ from the keys the command actually accesses
- #14847 Out-of-bounds `argv` access during key extraction when checking ACL permissions of a KEYNUM keyspec command (e.g. `EVAL`) with wrong arity
- A malicious RDB payload with an out-of-range `SLOT_INFO` slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
- #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key