From appearances the devs need to patch in the update from Unity and then push a new revision of some sort.
Marvel Snap has already done this.
EDIT: the vulnerability will basically not impact MPQ players at all unless you have a personal website and post it in your ingame chat. For some reason. Not saying the patch shouldn’t happen with the next update, but people shouldn’t worry that someone’s going to get to their App Store account and credit card from MPQ or anything like that.
This needs comment from the Devs. Like Monday.
This happens. I was able to find 5 or 6 Unity vulnerabilities at this level over the years, which makes sense – it’s so widely used that of course bad guys would target it as an attack vector.
What’s funny is that the old engine was likely riddled with flaws like this. It’s just that nobody ever found them because bad guys wouldn’t bother to target an app with so few users.
Since its in PC game I would not be surprised if its a Windows only issue.
KGB
Seems not to be a big problem, the only thing these guys could steal would be my time and my diggnity, no wait MPQ already did that, nothing to gain from me
The article specifically calls out all platforms. Well, definitely Android.
Not sure how much iOS players will be impacted if it requires a second app to access the back door, and they’re a bit more locked down as to what is allowed on the store.