CitizenFX (NuGet) · Malicious Code
Affects CitizenFXSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 20:39 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetCitizenFXpkg:nuget/CitizenFXOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official fix or updated package is released, users should avoid using the affected versions 2.54.7, 2.54.8, and 2.54.9 of CitizenFX. Consider reverting to earlier safe versions or monitoring for vendor updates.
Description
Malicious code has been identified in specific versions of the CitizenFX package distributed via NuGet. The affected versions are 2.54.7, 2.54.8, and 2.54.9. This issue is cataloged as a malicious package threat rather than a traditional vulnerability with a CVSS score. No known exploits in the wild have been reported at this time.