CVE-2026-14765

Name of the Vulnerable Software and Affected Versions Unreal Engine versions prior to 5.8.1

Description The software contains an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, allowing all URL schemes. On Windows, this leads to a call to the ShellExecuteW() function using the open verb, which enables the execution of a referenced file when a file:/// URI is provided. Consequently, any game developed with Unreal Engine that loads user-generated content containing Blueprints is susceptible to command execution through a malicious local file or a remote file hosted on a WebDAV share.

Recommendations Update Unreal Engine to a version newer than 5.8.0. Restrict the loading of user-generated content containing Blueprints to minimize the risk of command execution.