Researchers Say a Kimi K3 Agent Swarm Found Redis Code-Execution Flaws in 27 Minutes

Security researchers report that an autonomous agent swarm built on Moonshot AI's newly released Kimi K3 found remote-code-execution flaws in Redis and assembled a working exploit in as little as 27 minutes. The run, described first in Russian-language coverage and then by English-language outlets, had the agents clone the Redis source code, run fuzzing, and debug crashes in the GNU Debugger inside an authorized test environment.

The technical findings are specific. According to The Hacker News, the work combined a stream consumer-group shared-NACK double-free, tracked as CVE-2026-25589, with a separate heap overflow in the bundled RedisBloom TDigest module, affecting stock builds of Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. The double-free lets the same block of memory be freed twice, which gives a reliable method for executing code.

Two caveats limit the alarm. The primary path requires an authenticated client, so it is an escalation after login rather than an unauthenticated break from the open internet. A further claim, that the same system found a zero-click attack chain against Telegram Desktop and iOS, is so far asserted by the researchers rather than independently confirmed.

Kimi K3 is a sparse mixture-of-experts model of about 2.8 trillion parameters that routes each token through 16 of 896 experts, with a one-million-token context and a variant, K3 Swarm Max, built for exactly this kind of large-scale parallel agent work. The significant point for defenders is that a downloadable Chinese model is the foundation for vulnerability discovery at machine speed.