CVE-2026-123017

A flaw was found in GodotSteam. The multiplayer networking component fails to validate peer identification numbers provided during initial connection handshakes, allowing a connected player to claim the designated server identity. A remote attacker participating in a multiplayer session can explo...