CVE-2026-78179

Summary

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.

Affected Software

Weaknesses

• CWE-1321: Improperly Controlled Modification of Object Prototype Attributes
• CWE-94: Code Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/vuln/394563
• https://vuldb.com/vuln/394563/cti
• https://vuldb.com/cve/CVE-2026-78179
• https://vuldb.com/submit/884183
• https://github.com/rexrainbow/phaser3-rex-notes/issues/572
• https://github.com/rexrainbow/phaser3-rex-notes/

• ←Previous
• Next→