Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2025-61680

Minecraft RCON Terminal: Plain Text Password Storage in Configuration

Description

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jaketcooper Minecraft-rcon

  • >= 0.1.0, < 2.1.0affected

References