Improper Enforcement of a Single, Unique Action

Overview pocketmine/pocketmine-mp is a highly customisable, open source server software for Minecraft: Bedrock Edition written in PHP Affected versions of this package are vulnerable to Improper Enforcement of a Single, Unique Action in the handling of ResourcePackClientResponsePacket packets wit...

CVE-2026-86198: Improper Enforcement of a Single, Unique Action

PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUSCOMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player...