Back Gigazine

A vulnerability has been discovered in 'Metal Gear Online' that could allow a PC to be ...

Gigazine • August 25, 2026

On August 24, 2026, the CERT Coordination Center (CERT/CC) revealed that version 1.1.2.8 of the PC version of '

According to CERT/CC, a special memory area prepared for 'Denuvo,' the tamper-proofing technology used in Metal Gear Online, was a factor that made the attack easier to succeed. This memory area is called 'RWX' and allows all data reading, writing, and program execution, making it possible for attackers to exploit it to execute code. In addition, if the host leaves during a match, host privileges are automatically transferred to another participant, so it was possible for an attacker to acquire host privileges midway through and send malicious lobby information to multiple connected players. The vulnerability has been fixed in version 1.1.2.9 of 'mgsvmgo.exe'. Along with the fix, the server version number has been changed from 15 to 16 and the lobby version number from 150 to 160, preventing connections to online services from the vulnerable older version. The vulnerability was reported by security researcher Alice Checkett, and according to CERT/CC, KONAMI was notified of the issue on July 15, 2026. As of the time of writing, KONAMI has not released any individual patch notes or security information regarding CVE-2026-19874, and CERT/CC has not received any statement from KONAMI.

Aug 25, 2026 18:07:00 in Game , Security , Posted by log1d_ts

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Metal Gear Online 3 Exploited A critical vulnerability (CVE-2026-19874) in Konami's Metal Gear Online 3 allows attackers to execute arbitrary code on players' machines via a heap-based buffer overflow in the multiplayer lobby system. This flaw, discovered by researcher Alice Cecchetto, enables malicious lobby hosts to exploit the kick_num field, leading to out-of-bounds writes that corrupt memory structures. The vulnerability affects version 1.1.2.8 of the game and was patched in version 1.1.2.9 released on August 4, 2026. Exploitation occurs automatically upon joining an attacker-controlled lobby, requiring no user interaction. Players are advised to update to the latest version to mitigate risks. As of now, Konami has not issued a specific advisory regarding this vulnerability. 5 sources 61

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2026-19874