Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-56137

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be e

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gotcha Gotcha Games Inc. RPG MAKER MV

  • 1.6.3 and earlieraffected

Gotcha Gotcha Games Inc. RPG MAKER MZ

  • 1.10.0 and earlieraffected

References