CVE-2023-25303: Atlauncher

High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days.

ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.

Affected products

• Atlauncher Atlauncher: before 3.4.27.0 (fixed in 3.4.27.0)

Published 2023-04-04. Last modified 2026-06-17.