A critical vulnerability has been discovered in certain versions of Litematica and Servux
A critical vulnerability has been discovered in certain versions of Litematica and Servux for Minecraft 1.21+, allowing malicious servers to send files outside the intended schematic directory. In the worst case, this could be used to install malware on a player's computer. If you've used an affected version and joined untrusted servers, update Litematica (and Servux if you run a server) to the latest patched release immediately. As a precaution, you can also search your system for files containing .litematic in the filename (such as something.litematic.jar), as these may indicate malicious files, though this check is not comprehensive.
u/DereChen — 10 hours ago
