What you need to know
- The Minecraft community has caught wind of a new Java deserialization exploit called BleedingPipe that affects a large number of popular mods.
- Players that install these mods or play on a server that has them installed may be vulnerable to a Remote Code Execution (RCE) attack.
- This type of attack allows bad faith actors to execute code on another person's system, and often results in identity theft.
- Aside from not playing modded Minecraft right now, you can scan and patch your game files with community-developed tools. Server owners should update their mods and install the PipeBlocker mod that attempts to fix the BleedingPipe vulnerability.
