HomeNewsCyberpunk 2077
Cyberpunk 2077 devs warn of security vulnerability with modsExternal DLL files can be used to execute code on PCs
External DLL files can be used to execute code on PCs
Cyberpunk Is Dead Because Of Us | Mystery Steam Reviews (Cyberpunk Video Games)Watch on YouTube
Cyberpunk Is Dead Because Of Us | Mystery Steam Reviews (Cyberpunk Video Games)
They put out the warning in a tweet, asking that folks “refrain from using files from unknown sources” until they can fix the issue.
If you plan to use@CyberpunkGamemods/custom saves on PC, use caution. We’ve been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.— CD PROJEKT RED CS (@CDPRED_Support)February 2, 2021
If you plan to use@CyberpunkGamemods/custom saves on PC, use caution. We’ve been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.
CDPR then shared more detailsin a statement sent to Eurogamer:
The discovery of the vulnerability is credited to PixelRick, a Cyberpunk modder and one of the creators of theCyberpunk Save Editor. He explained in aReddit commentthat the vulnerability would allow hackers to take “asset archives and save files” - normally non-executable files - and have them execute code on your machine at the point at which Cyberpunk loads said files. This could theoretically happen without the player knowing, as the game could continue to load the expected mod or saved game as normal afterwards.
Hopefully I haven’t butchered that explanation. In short: thing bad, and CD Projekt Red are working to fix it. I’ll try not to die from secondhand embarrassment in the meantime.
You’re probably best to just avoid mods entirely for now, but once fixed, there arealready some great Cyberpunk 2077 modsavailable.
