Vulnerabilities

TI-2026-29818 CVE-2026-41196

Luanti has a mod security sandbox escape

MEDIUM 41

Luanti (formerly Minetest) is an open source voxel game-creation platform.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00374 Published 2026-04-23 Fixed in 5.15.2 CWE-94

TI-2022-16403 CVE-2022-35978

Lua sandbox escape from mod in Minetest

MEDIUM 48

Minetest is a free open-source voxel game engine with easy modding and game creation.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03082 Published 2022-08-15 No fix listed CWE-693

TI-2022-08181 CVE-2022-24300 · GHSA-f7m8-fvp5-fpmw

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same…

MEDIUM 45

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2022-02-02 No fix listed

TI-2022-08182 CVE-2022-24301 · GHSA-vj6w-cj6v-8ff8

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.

LOW 31

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00994 Published 2022-02-02 No fix listed CWE-276

Vulnerabilities

Filters

Luanti has a mod security sandbox escape

Lua sandbox escape from mod in Minetest

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same…

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.