5 matches found
CVE-2026-123017
A flaw was found in GodotSteam. The multiplayer networking component fails to validate peer identification numbers provided during initial connection handshakes, allowing a connected player to claim the designated server identity. A remote attacker participating in a multiplayer session can explo...
CVE-2026-123017
GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grantgold1000000 call can be forged...
CVE-2026-123017
The GodotSteam library, versions 4.17 through 4.23.2 , contains an authentication bypass vulnerability (CWE-290) where it incorrectly trusts a peer value of 1 to identify a player as the server. This flaw allows an attacker to forge a grant_gold(1000000) call. The documents do not provide specifi...
