Omd redis component security treat with CVE-2025-49844 | CVSS Score: 10, CVE-2025-46817 | CVSS Score: 7

[professional_prutser]

@Harjit.awk

Our security team have raised a concern that OMD uses redis process which have security treats with lua scripts.

You security team isn’t concerned by the EoL version of Redis?

Redis vulnerability, is Checkmk affected?

Up to (excluding) 6.2.20 https://nvd.nist.gov/vuln/detail/CVE-2025-49844 on my CheckMK installation: $ /opt/omd/versions/2.4.0p12.cre/bin/redis-server --version Redis server v=6.2.6 sha=00000000:0 malloc=jemalloc-5.1.0 bits=64 build=f35771a09122ad2e doesn’t look good 6.2 EoL per February 28, 2025 doesn’t look good at all