CVE-2026-123017

GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grantgold1000000 call can be forged...

CVE-2026-123017

The GodotSteam library, versions 4.17 through 4.23.2 , contains an authentication bypass vulnerability (CWE-290) where it incorrectly trusts a peer value of 1 to identify a player as the server. This flaw allows an attacker to forge a grant_gold(1000000) call. The documents do not provide specifi...

EUVD-2026-117358

GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grantgold1000000 call can be forged...

CVE-2026-123017

GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grantgold1000000 call can be forged...