A huge security exploit has been discovered in Counter-Strike 2, allowing malicious users to obtain the IP addresses of entire lobbies.
As explained by X/Twitter user Ozzny, in the past hours, several users reported a security exploit with Steam names inside the game which allows players to make some visual changes with a simple HTML code linking an image. The issue is that this exploit allows a malicious user to obtain the IP addresses of every player connected to the server with the help of an IP logger. While unconfirmed, this security exploit could potentially allow another user to gain control of another’s Steam account or the entire computer. @PirateSoftware commented on the matter, saying that the security issues are real, advising users not to play Counter-Strike 2 until Valve fixes the exploit.
HUGE SECURITY EXPLOIT IN CS2 RIGHT NOW⚠️
This image has been going around reddit for the last few hours (very explicit, blurred for obvious reasons). People were saying it’s fake, but it isn’t.
Apparently, there is a security exploit with Steam names inside CS2, which allows… pic.twitter.com/lcQqsAB5Ba
— Ozzny (@Ozzny_CS2) December 11, 2023
If you don’t want to just take my word from it, here’s an actual expert’s opinion validating this issue:
(📽️ @PirateSoftware) pic.twitter.com/zm67088kMj
— Ozzny (@Ozzny_CS2) December 11, 2023
Things haven’t been great for Counter-Strike 2 since its release, as many are the issues that are preventing the game from reaching the popularity of its illustrious predecessor, CS: GO. Back in October, several users were wrongfully banned from the game as AMD Anti-Lag+ Drivers led to an Anti-VAC detection trigger. These bans were eventually reversed, but the matter showed how Valve still has to hit its stride for the sequel of one of its most-popular titles.
Counter-Strike 2 is now available on PC via Steam.
