CVE-2026-45289
CloudburstMC Protocol: Partially missing validation for FULL type authentication tokens
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526-15, CloudburstMC Protocol is partially missing validation for FULL type authentication tokens (Cloudburst/Protocol). This vulnerability impacts publicly accessible software depending on the affected versions of Protocol, specifically the EncryptionUtils methods to validate auth payloads for FULL type tokens. This issue has been patched in version 3.0.0.Beta12-20260420.182526-15.
| CWE | CWE-287 |
| Vendor | cloudburstmc |
| Product | protocol |
| Published | Jun 2, 2026 |
| Last Updated | Jun 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for cloudburstmc protocol
Be the first to know when new medium vulnerabilities affecting cloudburstmc protocol are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
CloudburstMC / Protocol
< 3.0.0.Beta12-20260420.182526-15