Back to changelog
Security advisoryv2026.4.7
Server-side block for Redengine event-trigger pattern
Redengine variant attempting to call a chained sequence of internal events is now blocked at the server-event validation layer.
What we shipped
- New event-pattern rule blocks the Redengine chained-event signature
- Affected event chain logged to evidence + auto-ban with replay clip
- Detection runs server-side, so client patches do not bypass it
Advisory metadata
Reported by: Internal red-team test
Affected before: v2026.4.6