[CVE-2026-56137] RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerabili…

Descripción técnica

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-78

Fuente oficial

Publicado en NIST NVD.