Unity confirms major security flaw for games and apps built since 2017

A major security flaw was recently discovered in the Unity game engine, affecting thousands of games and applications built since Unity version 2017.1. Unity has been quick to address the issue, pushing out a fix but developers will have to take it upon themselves to implement it.

The vulnerability, listed as CVE-2025-59489, was discovered by security researcher RyotaK back in June. Unity has now publicly addressed the issue now that fixes are available. Unity states that there is “no evidence” that the vulnerability had been exploited by bad actors.

Specifically, the vulnerability could allow an attacker to execute malicious code via Unity applications by hijacking shared libraries. Some of the most popular titles, like Among Us, Marvel Snap and Cities Skylines 2 have already been updated to address the issue. Other studios, like Obsidian, have removed a number of games from sale while the problem is addressed.

Unity has already addressed the issue in Unity 2019.1 and newer, while a binary patcher is available to developers to fix games built on older versions dating back to Unity 2017.1.

Discuss on our Facebook page, HERE.

KitGuru Says: Unity has taken the issue seriously and appears to have worked behind the scenes to ensure some of the most popular titles were fixed before this public announcement was made. Hopefully every app and game can be updated swiftly, but there will no doubt be some stragglers, so you should be careful installing any older Unity-based apps, especially if you are sideloading on Android. 

Become a Patron!