Feed›Vulnerability›Age of Empires II patch fixes RCE bug exploitable through mu...

VulnerabilityCyber Insider

8.8 — CRITICAL

Age of Empires II patch fixes RCE bug exploitable through multiplayer lobbies

📅 16 July 2026 at 10:22 UTC📰 Cyber InsiderView original source ↗

A recent update for Age of Empires II: Definitive Edition fixed a remote code execution (RCE) vulnerability that could have allowed attackers to compromise other players' systems through multiplayer. The flaw, tracked as CVE-2026-50663, stemmed from a relative path traversal bug that security researcher Rick de Jager demonstrated could be exploited through custom scenarios and … The post Age of Empires II patch fixes RCE bug exploitable through multiplayer lobbies appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

A remote code execution (RCE) vulnerability was discovered in Age of Empires II: Definitive Edition, allowing attackers to compromise other players' systems through multiplayer lobbies. The vulnerability has been fixed with update 174992.

⚙️Technical Details

Affected Systems

Age of Empires II: Definitive Edition

Attack Vectors

joining an attacker's lobby and accepting user-generated contentloading into a match and extracting XS script files

💥Impact Assessment

Severity: high

Who Is at Risk

players running older versions of Age of Empires II: Definitive Edition

🛡️Recommended Actions

1ensure running the latest version of Age of Empires II: Definitive Edition

2avoid opening custom scenarios or accepting user-generated content from untrusted players

3regularly update software to prevent exploitation of known vulnerabilities

📦Affected Products

Age of Empires II: Definitive Edition

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗

← Back to feed