Render: [Scheduled] Remediation for Render KeyValue/Redis security bulletin: CVE-2025-49844
CVEs mentioned
- CVE-2025-49844Redis Lua Use-After-Free may lead to remote code executionCVSS 10.0 criticalnames this CVE
Only CVEs the vendor’s text names by id, or that its notice says it is not affected by. A mention is not a statement that the vulnerability caused this incident.
Timeline of updates
- resolved
The scheduled maintenance has been completed.
From Render’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on status.render.com (opens in new tab).