&gt;this is not a problem with redis but a configuration&#x2F;ops problem instead.<p>Default system wide failure is a redis problem. Any modern daemon should come with configuration files that a) don&#x27;t allow the application to run as root unless uncommented by user action, and b) bind to localhost. Further configuration should be necessary to break the system as thoroughly as this user did.