User-Generated Content Security

Community maps in MECCHA CHAMELEON could write files anywhere on a player's disk

Aikido Security says a Blueprint audio node exposed to community maps accepted any file path, letting a lobby host's map plant files on every player's machine. The maintainers fixed it in the 4.0.0 update.