PT-2026-33197 · Luanti · Luanti

CVE-2026-40959

Published

2026-04-16

Updated

2026-06-02

CVSS v3.1

9.3

Critical

Vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Luanti versions 5.0 through 5.15.1

Description A sandbox escape exists when LuaJIT is used, allowing a crafted mod to execute arbitrary code outside the game engine.

Recommendations Update to version 5.15.2.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-40959

GHSA-G596-MF82-W8C3

USN-8366-1

Luanti