Live › vulnerability › CVE-2026-116098
Go to dashboardRavenfield's loader for custom maps (.rfl/.rfld, e.g. Steam Workshop) deserializes untrusted data in cacheCoverPoints. The developer describes it as remote code execution on loading a malicious map, present since modded maps were introduced. The developer fixed it on Sep 19 2026 and says it has no reports or indication of exploitation. The researcher blog title calls it one-click RCE. Legacy branches were removed because they are unpatched.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 00:38 UTC. All times on this page are UTC.
Teams running SteelRaven7 Ravenfield build 25407073 with the RFL/RFLD custom map handler in use. The sources do not say whether the flaw needs a server, a shared map feed, or only a local game client, so whether a given install is reachable is unknown.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Ravenfield | vendor | build 25407073 and earlier builds before the Sep 19 2026 EA39 Security Patch | EA39 Security Patch (Sep 19 2026); current public build 25532209 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-116098")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.