Cyberpunk 2077 modding system has a security vulnerability; CD Projekt Red issues a warning
CDPR also noted that the security vulnerability extends to “custom saves”. Here is everything we know around the security vulnerability in the modding system of Cyberpunk 2077.
CD Projekt Red (CDPR) has just issued a warning to Cyberpunk 2077 players on Windows. As per the warning, the game developer and publisher has asked gamers to “use caution” while using game mods. This came right after CDPR discovered a security vulnerability in the modding system of the AAA video game. After inspecting the announcement, the company shared some information regarding the security vulnerability in a tweet. The game developer revealed that the issue lines with some “External DLL files” that Cyberpunk 2077 users. CDPR also noted that the security vulnerability extends to “custom saves”. Let’s check everything we know around the security vulnerability in the modding system of Cyberpunk 2077 and more here.
Cyberpunk 2077 developer asks users to be careful while using mods, details
The game developer first shared this warning through its CD Projekt Red Customer Support Twitter handle. According to the tweet, hackers and malicious parties can use this vulnerability to exploit external DLL files. They can put malicious code in the Cyberpunk 2077 mod or custom save file and “execute” it on your PC. This means that they can run unauthorized, malicious code to possibly take over your system. CDPR also stated that it is working on a fix for the security issue and will roll it out ASAP.
The report around the security problem comes just a week after CDPR rolled out the official Cyberpunk 2077 modding tools. It noted that players should not install mod files from “unknown sources” which indirectly affects all the mods out there. Players who know how to read and understand the code involved in the mod can take the risk but everyone else should stay away from mods for some time. This comes just days after CDPR faced another controversy around its modding system.
If you plan to use @CyberpunkGame mods/custom saves on PC, use caution. We've been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.
— CD PROJEKT RED CS (@CDPRED_Support) February 2, 2021
Looking at recent reports, the company removed a mod related to Johnny Silverhand, an in-game character based on Keanu Reeves. CDPR also issued a statement outlining that it needs to take permission from Keanu Reeves before allowing players to use the mod. In the meantime, the company has removed the mod from the game.