VYPR
Medium severity6.5NVD Advisory· Published Nov 5, 2026

CVE-2026-123017

CVE-2026-123017

Description

GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(1000000) call can be forged.

Affected products

1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.