Kimi K3 produces 19 exploits in 90 minutes for the latest Redis release

Chaofan Shou says Kimi K3 found 19 flaws in 90 minutes; public code documents an authenticated exploit against Redis's latest release.

By · Published

Primary source: X

Why it matters

The public evidence supports one serious Redis 8.8.0 exploit, not yet the claimed 19 zero-days. AI agents are sharply reducing the time between source review and working exploit code.

Illustration of the Kimi K3 probe inspecting a miniature Redis server model and revealing a security vulnerability.

Chaofan Shou (@Fried_rice), a security researcher who previously built fuzzing systems for browsers and smart contracts, published code on July 23rd that he says turns a flaw in Redis 8.8.0 into remote code execution after Moonshot AI's Kimi K3 model searched the codebase.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.