War Thunder
Monthly
War Thunder versions 2.57.1.140 through 2.59.0.9 send the auth_jwt bearer token in the first data packet after the TCP handshake using LZ4 compression instead of encryption, so an on-path attacker can passively capture and decompress the packet to temporarily impersonate the user. The impact is limited to unauthorized gameplay access and low-sensitivity profile data such as email address and displayed phone number; it does not enable password changes, security-setting changes, 2FA management bypass, or financial access. No public exploit code or confirmed active exploitation was identified at time of analysis, and the CVSS vector rates this as high attack complexity with CVSS 4.8.
War Thunder versions 2.57.1.140 through 2.59.0.9 send the auth_jwt bearer token in the first data packet after the TCP handshake using LZ4 compression instead of encryption, so an on-path attacker can passively capture and decompress the packet to temporarily impersonate the user. The impact is limited to unauthorized gameplay access and low-sensitivity profile data such as email address and displayed phone number; it does not enable password changes, security-setting changes, 2FA management bypass, or financial access. No public exploit code or confirmed active exploitation was identified at time of analysis, and the CVSS vector rates this as high attack complexity with CVSS 4.8.