Security Vulnerability - PC Client & Android App
Earlier this month Unity released an announcement regarding the exploit, CVE-2025-59489, which allows arbitrary code execution through Unity with the permissions granted on the host device and has existed in every version of Unity since 2017. This means malicious code could use the PC Client and Android App to steal information or worse from devices where it is installed. The platforms it is affecting are: Windows, macOS, Android, and Linux.
Unity has released a Remediation guide for developers to patch their games and remove this exploit.
However at least for the PC Client the Unity version has not been patched, it is running 2022.3.62f1 which is a Susceptible Version.
I have not seen any information posted regarding a timeline or action being taken to address this situation and hope that there is something happening in the background because right now anyone who is playing the game on these platforms is at risk.
I hope to see this fixed as soon as possible,
N