Critical Security Exploit: Players Forcing Server Lag and Disconnections in Creative

Summary

Critical security issue where players can intentionally cause severe lag, packet loss, and server instability in Creative maps using external tools.

Please select what you are reporting on:

Unreal Editor for Fortnite

What Type of Bug are you experiencing?

Stability

Steps to Reproduce

Join a Creative map (including my island).
Have multiple players in the session.
A malicious user uses an external tool to stress the server.
Observe sudden and extreme lag affecting all players.
Players begin to experience packet loss, stuttering, and disconnections.

Expected Result

Servers should be secure and protected against any external interference. Players should not be able to intentionally cause lag or disrupt sessions for others.

Observed Result

A player demonstrated the ability to intentionally create severe lag, packet loss, and server instability using an external program. This results in the entire lobby being affected, making the game unplayable and forcing players to leave or disconnect.

Platform(s)

All platforms

Island Code

9653-9433-1421

Upload an image

Video

Additional Notes

While playing on my map, the lag issue occurred again, causing major disruption and crashes. A player in the session openly claimed they were responsible for causing the lag. At first, I did not believe this, but the player later proved it.

They showed me, via Discord, how they were using an external program called “Cletus Network” to perform what appeared to be a stress attack on the server, causing players to lag and leave the game.

I have full video evidence of this, including footage of their screen while using the tool, as well as their account ID. This clearly demonstrates that the lag is being intentionally triggered.

This has not been an isolated case. I have been experiencing similar attacks repeatedly over the past few days, which has resulted in a significant loss of players and has severely affected the experience on my map.

This appears to be a serious security vulnerability, as players are able to intentionally disrupt Creative sessions using external tools. I am willing to provide all evidence if needed and strongly recommend this issue be investigated urgently.