GDevelop vulnerabilities

Products

• GDevelop 1

Latest GDevelop CVEs

Newest publication first

1. CVE-2026-112303 GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs

   Published 2026-10-19

   Medium·CVSS 5.3

   GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile() to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.