CVE-2026-55624CWE-670

CVE-2026-55624

published August 25, 2026

CVSS
5.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00235 · 14.3th percentile
Weakness
CWE-670 · Always-Incorrect Control Flow Implementation
Published
2026-08-25T19:16Z
References (2)
https://codeberg.org/MintyItanium/Lost-Auction · [email protected]https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8 · [email protected]
EPSS history
Timeline
  • 27 AUG 06:36Z
    EPSS moved — → 0%
    epss
  • 25 AUG 14:56Z
    MintyItanium Lost-Auction takes items like barrier blocks out from search GUI
    cvelistv5