Is CVE-2024-56141 actively exploited?

No active exploitation of CVE-2024-56141 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-56141 be exploited remotely?

Yes. CVE-2024-56141 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-56141?

CVE-2024-56141 has a CVSS score of 5.0 (MEDIUM).

HOME VULNERABILITIESCVE-2024-56141

MEDIUM

CVE-2024-56141

CWE-329Published: July 7, 2026· Updated: Jul 8, 2026

5.0

CVSS v3.1

EPSS:0.11%probability of exploitation in 30 daysPercentile:1.6th

Official Description

Minosoft is an open-source, multi-version Minecraft Java Edition client written in Kotlin. Starting in commit f1ae30e2b046a490026a8413b075685deb795122, the CryptManager encryption routine ( CryptManager.kt ) initializes its AES cipher using an initialization vector (IV) that is set equal to the secret key rather than to a sufficiently random value. Because the IV is not random and is derived directly from the key, the encryption is vulnerable to chosen-ciphertext/chosen-plaintext attacks: an attacker who can submit specific messages for encryption can recover the secret key. This affects all versions supporting Minecraft protocol 1.7 and later. No patched version is available, and no known workarounds are available.

NVD Source

Technical Analysis

CVE-2024-56141 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.