CVE-2021-48006 | pmmp PocketMine-MP up to 4.0.2 Operator Entries ops.txt removeOp Name access control

September 6, 2026 Yanac

A vulnerability was found in pmmp PocketMine-MP up to 4.0.2. It has been declared as problematic. This affects the function removeOp of the file ops.txt of the component Operator Entries. Executing a manipulation of the argument Name can lead to improper access controls.

This vulnerability is tracked as CVE-2021-48006. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More