CVE-2025-61680CWE-256

CVE-2025-61680

published October 4, 2025

CVSS
6.6
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.

The record
Technical detail
CVSS
6.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-10-04T02:15Z
References (3)
https://github.com/jaketcooper/Minecraft-rcon/commit/31272b541482d095d1578855c2b571268eb9b877 · [email protected]https://github.com/jaketcooper/Minecraft-rcon/releases/tag/2.1.0 · [email protected]https://github.com/jaketcooper/Minecraft-rcon/security/advisories/GHSA-4m33-hxqw-7j77 · [email protected]
EPSS history
Timeline
  • 03 OCT 21:37Z
    Minecraft RCON Terminal: Plain Text Password Storage in Configuration
    cvelistv5