CVE-2026-56137
OS Command Injection via Malicious Save File in RPG MAKER MV and MZ
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.
CVSS 4.0 · 8.4 High
EPSS 1.1%
KEV · Not listed
Vendors
Products