Medium severityOSV Advisory· Published Oct 3, 2025· Updated Apr 15, 2026

CVE-2025-61680

Description

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.

Affected products

Jaketcooper/Minecraft RconOSV
Range: 1.0.0, 1.1.0, 1.1.1, …

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/jaketcooper/Minecraft-rcon/commit/31272b541482d095d1578855c2b571268eb9b877nvd
github.com/jaketcooper/Minecraft-rcon/releases/tag/2.1.0nvd
github.com/jaketcooper/Minecraft-rcon/security/advisories/GHSA-4m33-hxqw-7j77nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000