Serious security flaw threatens Minecraft and possibly the entire internet — what to do
If you’re a Minecraft player using the Java Edition on a PC, Mac or Linux box, you’ll want to update your game software to the latest version immediately.
There’s a very serious security flaw that could let malicious hackers totally take over your computer. The issue could also affect many other online services, including possibly Steam and Apple iCloud, but we don’t yet know exactly how severe the threat to those other platforms is.
Ideally, you want your Minecraft Java Edition client software to be fully updated to version 1.18.1, released earlier today (Dec. 10). Often, just closing the game and then restarting the launcher will automatically update the game software to the latest version.
“If you play Minecraft: Java Edition, but aren’t hosting your own server, you will need to take the following steps,” said a blog post today on the Minecraft website. “Close all running instances of the game and the Minecraft Launcher. Start the Launcher again — the patched version will download automatically.”
I’d advice you to not play versions of Minecraft earlier than 1.12 right now.December 10, 2021
Players running Minecraft mods based on earlier versions of the Java Edition will have to figure out their own way to version 1.18.1. Administrators of Minecraft servers need to follow specific instructions depending on which server-software version they’re running, as detailed in the Minecraft blog post. Interestingly, versions below 1.7 don’t seem to be affected by this flaw.
Nor does the flaw seem to affect Minecraft Bedrock Edition, aka just Minecraft. That edition is not based on Java and runs on Windows, mobile devices and game consoles. That version is up to 1.18.2.
Generally, if you downloaded your Minecraft software for Windows from the Minecraft website, or you’re using a Mac or Linux box, you’re running the Java Edition.
If you got the Windows version of the game from the Microsoft online store, or you’re playing Minecraft on iOS, Android or a gaming console, then you’re running the Bedrock Edition and you’re not in any danger.
“This exploit is quite severe on Minecraft Java Edition. Anyone can send a chat message which exploits everyone on the server and the server…
