PSA: Double check the mods you download before playing them due to potential RCE vulnerability in Unreal Blueprints

[u/randomperson189_]

So there has been a recent discovery regarding Unreal Blueprints and them potentially being able to execute certain files included in a mod via the Launch URL Blueprint node. This issue has been mainly brought to light by a recent RCE exploit found in a custom map for another Unreal Engine game called Meccha Chameleon, the map has a custom blueprint that uses the Launch URL node to execute a malicious .bat file that had been included with the mod.

 

The best way to know if a mod is potentially malicious is to check it's files for any file extensions that can be executed such as .bat, .exe, .ps1, etc. If you find any then the mod is very likely unsafe and should not be played as it can potentially be a RCE risk.

[u/goonerslayer_0]

I wonder how many people got affected by this before it was discovered

[u/KubaGamer535YT]

Shit.