Unity discloses a years-old security exploit and urges developers to update their games
Companies like Valve and Microsoft have taken steps to protect users, too.
Unity is urging developers to take "immediate action" after it disclosed a major security vulnerability affecting games built using versions of its popular development tool dating back to 2017. While there is "no evidence of any exploitation of the vulnerability, nor has there been any impact on users or customers," Unity already has fixes available to developers, according to a post from Larry Hryb, aka "Major Nelson."
Numerous developers have taken actions in response to the disclosure. Obsidian removed some of its games and products from digital storefronts, including Grounded 2 Founders Edition, Avowed Premium Edition, Pillars of Eternity: Hero Edition, Pillars of Eternity II: Deadfire, and Pentiment, until it can "implement the necessary updates to address the issue." Marvel Snap, No Rest for the Wicked, Ingress, and Fate/Grand Order have all received updates as well. And Atlus says Persona 5: The Phantom X will get an update.
Good on these developers for taking action, hopefully they will get this exploit fixed soon.