What’s Vulnerable › Products

tgstation-server vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your tgstation-server version is affected

Latest tgstation-server vulnerabilities

• CVE-2025-21611 — tgstation-server's role authorization incorrectly OR'd with user's enabled status (CVSS 8.8)
• CVE-2024-41799 — tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users (CVSS 9.9)
• CVE-2023-34243 — Windows user name disclosure in TGstation (CVSS 5.3)
• CVE-2023-33198 — Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API (CVSS 7.5)
• CVE-2023-32687 — Insufficiently Protected ChatBot Credentials in tgstation-server (CVSS 6.5)
• CVE-2020-16136 — (CVSS 7.7)
• CVE-2018-17107 — (CVSS 9.8)