Rockstar Games-owned FiveM which allows for modified GTA Online experiences such as GTA RP servers has major security flaws according to a new report. This follows on from a large, damning report on the behind the scenes of Rockstar’s takeover of FiveM in 2023.
Whilst we only had one side of the story, various people involved spoke out about how certain members of the GTA modding space infiltrated the group along with causing trouble.
One of the issues in that report that was brought to the attention of the public was critical security issues. Despite cfx.re talking about how they are improving security, community members dispute the platform has been well maintained.
Revealing A Lack Of Updates
According to a new report by community member Fravilys, piracy is rife within the FiveM community and exploits are will allow bad actors to cause mayhem. Multiple critical vulnerabilities part of FiveM have been found by members. These also extend to the platform’s Chromium-based browser that server owners use on top of their works.
Given how popular Chromium-based browsers are such as Google Chrome and Microsoft Edge, attacks are made on it often. Google’s teams working on the browsers must work fast to patch major vulnerabilities. It is said 1 critical flaw is patched every two weeks on average. However, the system used in FiveM has not been updated since June 2022. That’s over 3 years ago.
What Could Happen
What this means is the iteration found in FiveM is missing protection against dozens of major hacks. This includes remote code executions and more. In theory, bad actors can target FiveM users across any servers of the platform by manually booting them into the Chrome-based browser and attacking them with attacks. From harmless trolling to malware that steals data.
Will It Be Fixed?
Fravilys’ report claims the current FiveM team is ill-equipped to take on the rising risks of FiveM. In Discord messages posted in the article, a lead developer working on FiveM allegedly says they won’t be updating the web browser any time soon.
The messages from February read “We don’t plan to update the CEF currently. The whole NUI thing is a big mess, so it will not be worth it”. It has been claimed FiveM’s code is not exactly well put together despite what it can actually achieve. This caused upset to those knowledgeable on this. There is a fear attacks could arise at any moment.
Sailing The High Seas
Another vulnerability that is being report involves piracy. Recently, gaps in the Asset Escrow licensing system have been exposed. This was meant to protect fan-made content but now such items are allegedly being stolen for sharing or even reselling.
Creators have taken to the cfx.re forums to express their disappointment in the rise of piracy but no acknowledgement has been made by the platform.
It is unclear what Rockstar has in store for FiveM. The future does not look too pretty with GTA 6 coming next year. Fans speculate if it will be integrated in the new game. In other news, Twitch claims it helped make GTA popular again by streaming GTA RP. They also say they are working with Rockstar on GTA RP plans.
Be sure to stay tuned to RockstarINTEL for any GTA 6 and FiveM news updates.
Subscribe to our newsletter!
