The CVE-2025-59489 vulnerability in Unity, and how to fix it in games | Kaspersky official blog

AI-suggested

1. Developers must urgently update to the latest Unity Editor version containing the patched runtime and recompile all affected games, then republish updates on all distribution platforms.
2. Users should promptly install updates for all Unity-based games and avoid running unpatched versions.
3. For unsupported or legacy games, use the Unity Application Patcher on Windows to replace vulnerable runtime libraries, understanding that this may not be feasible on macOS or Android.
4. Organizations should implement application whitelisting and restrict execution of games with suspicious startup parameters.
5. Endpoint detection and response (EDR) solutions should be tuned to detect unusual game launch parameters and loading of unexpected dynamic libraries.
6. Network controls should block or monitor URI schema handler invocations from untrusted browsers or websites to prevent remote exploitation.
7. Steam users should ensure their client is updated to benefit from Valve’s protective measures that block unsafe game launches.
8. Consider temporarily uninstalling vulnerable games on critical systems until patches are available.
9. Educate users about the risks of launching games from untrusted sources or clicking suspicious links that may trigger game launches with malicious parameters.
10. Maintain comprehensive cybersecurity solutions like Kaspersky Premium to detect and prevent first-stage malware and exploitation attempts.