Is CVE-2026-78179 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78179?

CVE-2026-78179 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-78179

Description

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.