Unity-Based Devs Prompted to Patch Their Games ASAP After Serious Security Vulnerability Discovered in the Platform

by

Unity, a top game development platform worldwide, has warned developers who use its engine about a recently discovered security flaw in the code. Although there’s no evidence that this vulnerability has been exploited, Unity is urging developers to update their games as quickly as possible.

Their announcement indicates the security flaw impacts games and applications built with Unity versions 2017.1 and newer. Essentially, any game launched from 2017 to the present is potentially vulnerable.

This alert prompted numerous game developers to update their games, and some large studios temporarily removed titles from online stores until they could implement the required corrections.

Which Games are Affected?

There’s a slew of Unity-based games that were affected by this vulnerability.

Obsidian Entertainment, the studio behind games such as Pillars of Eternity, Avowed, and Outer Worlds, has taken down certain editions of Avowed, Grounded 2, and Pillars of Eternity 1 and 2.

We’ve recently discovered a security weakness in our games made with Unity.

To protect you, we’ve temporarily taken down the following games and products from online stores while we work on a fix:…

— Obsidian (@Obsidian) October 3, 2025

Because so many games are made with the Unity engine, you might find that some of your favorite games are temporarily unavailable on digital stores. Popular games such as Fallout Shelter, Wasteland 3, and Pentiment are just a few examples of this.

That’s why, if you go to their Steam pages, you’ll see a message stating the game is “no longer available on the Steam store.” But don’t worry, this is just temporary. The games will come back once they’ve been updated, although we don’t know exactly when that will be.

So, if you already own these games, the good news is you’re not losing access! However, Microsoft is really recommending that we temporarily uninstall them until they get a fix sorted out. It’s a bit annoying, but they think it’s the best way to avoid any issues.

Unity has alerted developers who launched games from 2017 to the present that they must rebuild and re-release their projects because of a security issue. Ouch! The vulnerability is identified as CVE-2025-59489. More information can be found here.

— George Deglin (@gdeglin) October 3, 2025

However, this problem isn’t just happening with games built in Unity. Any game that includes extra apps – like companion applications or launchers for artbooks – will also be impacted. For instance, Avowed, a game created using Unreal Engine 5, features a digital artbook that was actually made with Unity.

Unity stated, “We’ve already released solutions to fix the security issue, and these are now accessible to all developers. We appreciate security researcher RyotaK for responsibly reporting the vulnerability and collaborating with us.”

In a recent statement, Unity outlined the steps game developers need to take to update their games. They’ve also provided a collection of Frequently Asked Questions to help developers better grasp the situation and simplify the patching process.

Currently, CVE rates this vulnerability as 7.4, which signifies it’s quite serious. This vulnerability could let attackers run code on, and potentially steal sensitive data from, systems using the impacted applications.

Read More

2025-10-05 02:37