CVE-2023-36123: Plain Craft Launcher 2 Project Plain Craft Launcher 2

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information.

Affected products

• Plain Craft Launcher 2 Project Plain Craft Launcher 2: version 1.3.9 only

Published 2023-10-07. Last modified 2026-06-17.