# Researchers Say a Kimi K3 Agent Swarm Found Redis Code-Execution Flaws in 27 Minutes

The 32-agent run on Moonshot AI's 2.8-trillion-parameter model cloned, fuzzed, and built a working exploit against several Redis versions, though the primary flaw requires an authenticated client.

- Published: 2026-07-25T05:43:03.754Z
- Canonical: https://polylog.news/ai/2026-07-25/researchers-say-a-kimi-k3-agent-swarm-found-redis-code-execu
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [Polylog editors](https://polylog.news), [The Hacker News](https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html), [Cyber Security News](https://cybersecuritynews.com/redis-server-0-day-exploit/)

Security researchers report that an autonomous agent swarm built on Moonshot AI's newly released Kimi K3 found remote-code-execution flaws in Redis and assembled a working exploit in as little as 27 minutes. The run, described first in [Russian-language coverage](https://t.me/ai_machinelearning_big_data/10584) and then by English-language outlets, had the agents clone the Redis source code, run fuzzing, and debug crashes in the GNU Debugger inside an authorized test environment.

The technical findings are specific. According to [The Hacker News](https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html), the work combined a stream consumer-group shared-NACK double-free, tracked as CVE-2026-25589, with a separate heap overflow in the bundled RedisBloom TDigest module, affecting stock builds of Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. The double-free lets the same block of memory be freed twice, which gives a reliable method for executing code.

Two caveats limit the alarm. The primary path [requires an authenticated client](https://cybersecuritynews.com/redis-server-0-day-exploit/), so it is an escalation after login rather than an unauthenticated break from the open internet. A further claim, that the same system found a zero-click attack chain against Telegram Desktop and iOS, is so far asserted by the researchers rather than independently confirmed.

Kimi K3 is a sparse mixture-of-experts model of about 2.8 trillion parameters that routes each token through 16 of 896 experts, with a one-million-token context and a variant, K3 Swarm Max, built for exactly this kind of large-scale parallel agent work. The significant point for defenders is that a downloadable Chinese model is the foundation for vulnerability discovery at machine speed.

## What this means

Agentic vulnerability discovery is moving from demonstration to repeatable workflow, and the exposed parties are the maintainers of widely deployed infrastructure such as Redis and the defenders who patch on human timelines. The mechanism is a difference in speed. A swarm that fuzzes, triages, and builds an exploit in under an hour shortens the time between disclosure and exploitation. Because the foundation is an open-weight Chinese model, the same capability is available to any actor who can rent enough computing power, not only well-resourced labs.

## What to watch

- Independent confirmation or retraction of the claimed Telegram and iOS zero-click chain, which separates a credible offense-automation result from a marketing claim.
- Whether Redis maintainers issue fixes for the named versions and how fast, a test of whether patch cadence can keep up with agent-speed discovery.
- Adoption of the same swarm approach by defensive teams for pre-release fuzzing, which would show the capability serving defense as well as offense.