predis/predis 3.0.0-RC1–3.3.0 mishandles pipeline RESP on aggregate cluster/replication connections: AbstractAggregateConnection::write() splits serialized buffers with explode(“rn”), so attacker-supplied keys/values with CRLF inject extra commands via Command::deserializeCommand(). Cluster routing via ClusterStrategy::getFakeKey() enables shard-wide deletes/reads/writes; replication can crash requests. Fix: upgrade to 3.3.0, avoid pipeline() with untrusted input.