CVE-2022-35978

CVE-2022-35978 is a critical vulnerability affecting the Minetest open-source voxel game engine. In single-player mode, a malicious mod can set a global setting that loads an unsandboxed Lua script upon exiting a game session, allowing direct interference with the user's system. With a CVSS score of 10.0, this vulnerability has a network attack vector, low complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no known public exploit code, and limited community discussion, the high EPSS and FAUCET Risk Score indicate significant potential for future exploitation.