CVE-2026-78179

Description

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.

CVSS Vector

References

• https://github.com/rexrainbow/phaser3-rex-notes/
• https://github.com/rexrainbow/phaser3-rex-notes/issues/572
• https://vuldb.com/cve/CVE-2026-78179
• https://vuldb.com/submit/884183
• https://vuldb.com/vuln/394563
• https://vuldb.com/vuln/394563/cti