RageAgainstThePixel unity-cli vulnerabilities

Latest RageAgainstThePixel unity-cli CVEs

Newest publication first

1. CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

   Published 2026-02-09

   Medium·CVSS 5.9

   unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are outpu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.