Minetest
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-41196 | Cri | 0.58 | 10.0 | 0.00 | Apr 23, 2026 | Luanti (formerly Minetest) is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device.… | ||
| CVE-2022-35978 | Hig | 0.00 | 7.7 | 0.03 | Aug 15, 2022 | Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua… | ||
| CVE-2022-24301 | Med | 0.00 | 6.5 | 0.01 | Feb 2, 2022 | In Minetest before 5.4.0, players can add or subtract items from a different player's inventory. | ||
| CVE-2022-24300 | Cri | 0.00 | 9.8 | 0.02 | Feb 2, 2022 | Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection. |
- risk 0.58cvss 10.0epss 0.00
Luanti (formerly Minetest) is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device.…
- risk 0.00cvss 7.7epss 0.03
Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua…
- risk 0.00cvss 6.5epss 0.01
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
- risk 0.00cvss 9.8epss 0.02
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.