PT-2026-45856 · Unknown · Cloudburstmc Protocol

Onebeastchris · CVE-2026-45289 · Published 2026-06-02 · Updated 2026-06-03

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions CloudburstMC Protocol versions prior to 3.0.0.Beta12-20260420.182526-15

Description CloudburstMC Protocol, a protocol library for Minecraft Bedrock Edition, contains a flaw where validation for FULL type authentication tokens is partially missing. This issue specifically affects the EncryptionUtils methods used to validate authentication payloads for these tokens.

Recommendations Update to version 3.0.0.Beta12-20260420.182526-15.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-45289

Affected Products

Cloudburstmc Protocol

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-45289 · Security Note
• https://github.com/CloudburstMC/Protocol/security/advisories/GHSA-g2fr-c75x-4hf9 · Note
• https://twitter.com/CVEnew/status/2061993226152579542 · Twitter Post
• https://t.me/CVEtracker/55646 · Telegram Post