CVE-2025-62170
High
Description
rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch.
SeverityHigh
CVSS7.5
Exploit probability—
ProductRathena
PublishedOct 13, 2025
First seenOct 13, 2025
Weakness typeCWE-416Use after free
How to fix
Update
- rathena rathena2025-10-12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rathena rathena | v < 2025-10-12 | 2025-10-12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.