CVE-2021-47852CWE-276

Rockstar Service - Insecure File Permissions

High · published January 21, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

⚡ An authenticated user can swap in a malicious binary, turning a harmless game launcher into your personal hacker tool! 🚨 Think of it as an employee at a hotel who can change the main entrance lock. With the key in hand, they could let themselves in and do whatever they want, from stealing sensitive guest information to checking into any room they wish. This privilege escalation vulnerability in the Rockstar Games Launcher allows attackers to replace the service executable, effectively granting them administrator access. If exploited, this could lead to serious data breaches or system compromise, giving attackers free rein over sensitive files and settings.

Put simply

Think of it as an employee at a hotel who can change the main entrance lock. With the key in hand, they could let themselves in and do whatever they want, from stealing sensitive guest information to checking into any room they wish. CVE-2021-47852 allows authenticated users to modify the RockstarService.exe with weak permissions, enabling the execution of malicious binaries and the creation of new administrator accounts.

What to do

This privilege escalation vulnerability in the Rockstar Games Launcher allows attackers to replace the service executable, effectively granting them administrator access. If exploited, this could lead to serious data breaches or system compromise, giving attackers free rein over sensitive files and settings. Patch the Rockstar Games Launcher to the latest version immediately. Review user permissions to limit access, and consider implementing a more robust authentication mechanism to prevent unauthorized modifications. Regular audits of executable files are also recommended to catch any malicious changes. You've got this! Stay vigilant, follow these steps, and protect your system like a pro! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    Rockstar Service - Insecure File Permissions
    cvelistv5