Epic Games Psyonix Rocket League Insecure Permissions Vulnerability Allowing Privilege Escalation

A vulnerability exists in Epic Games Psyonix Rocket League versions through 1.95, allowing authenticated users to modify executable files due to insecure permissions. The 'Authenticated Users' group is granted full access, enabling potential escalation of system privileges by replacing executables with malicious binaries.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of executable files, allowing for the introduction of malicious code that could be executed with elevated privileges.

Reproduction

The vulnerability can be reproduced by an authenticated user who has access to the 'Authenticated Users' group. Once logged in, the user can take advantage of the full access permissions to modify executable files in the Rocket League installation directory.