GravitLauncher vulnerabilities
We track 1 vulnerability in GravitLauncher products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest GravitLauncher vulnerabilities
- 9.8 Critical severity
Launcher: Improper Limitation of a Pathname to a Restricted Directory
GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.cha