CVE-2023-33245: Minecraft

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

Affected products

• Minecraft Minecraft: up to and including 1.19; version 1.20 only

Published 2023-05-30. Last modified 2026-06-17.