Gameguru Mania

Updated:08:54 AM CET Nov,02

AR Wallet


CONTACT
Please e-mail us if you have news.

(c) 1998-2026 Gameguru Mania
Privacy Policy statement
SEARCH:
 Gameguru Mania News - Sep,18 2026 -  
Unpatched Steam Bug Lets a Local Windows User Become SYSTEM - tech
(hx) 10:45 AM CEST - Sep,18 2026 - Post a comment / read (4)
A public proof-of-concept called BrokenPipe shows that a standard Windows user can raise privileges to NT AUTHORITYSYSTEM through Steam’s Client Service.

Researcher KillaBoi published the demonstration on GitHub and said it was tested on Steam 10.96.30.42 on fully updated 64-bit Windows 10 and 11. The service already runs as SYSTEM; the proof of concept makes it launch a program with those rights without an administrator password or a UAC prompt, and a Steam login is not required.

No CVE has been assigned, Valve has not issued a public advisory, and there is no confirmed evidence of attacks in the wild. The researcher claims Valve was told in March 2026 and that a HackerOne report was later marked a duplicate; Cyberinsider said it contacted Valve and received no reply.

Until Valve ships a client fix, this remains a local escalation issue on PCs that already have Steam installed - not a remote hack of Steam accounts. **Sources** - https://gbhackers.com/steam-windows-vulnerability/ - https://github.com/KillaBoi/BrokenPipe - https://cyberinsider.com/steam-client-flaw-with-no-fix-enables-privilege-elevation-on-windows/ - https://habr.com/ru/news/1082774/
last 10 comments:
Csimbi(08:24 PM CEST - Sep,18 2026 )
Haha, let the fun begin!

Sabot(11:33 PM CEST - Sep,18 2026 )
That’s why Steam is a steaming pile of shit!
How anyone can back Valve is deluded.
Imagine if the world went back to pre 2000 and we all had physical discs and installed/uninstalled as we used to do, without the fucking internet being needed for single player - especially steam. I don’t care for its kindergarten forums and unmoderated use of AI now to vet posts such as ‘this game is worse than cancer’, or, ‘not getting any money off me, robbing bastards’.
No wonder kids as young as 9 walk about speaking like this and have no rules

NakedFaerie(06:14 AM CEST - Sep,19 2026 )
so its really rare for this to be a problem.
1, you have to have direct access to the PC so its not a remote attack socar factor is 0.
2, you have to have an account already but without system access.
So whats that. 0.00000001 of users. ok.
Then that 3 users need to know how to do this expliot.
and wow, they have system access.

Would be a lot easier to use other means to get a system accouts password.
Thats a perminate exploit micrtosoft cant fix so care factor for this exploit is 0 thats why valve is doing nothing. its so little its pretty much nothing.
eventually they will patch it but as they have their own OS without that bug they dont care. its on buggy windows with thousands of exploits so 1 very neiche local account exploit is not even bling on microsofts radar.
so who cares?
We only know because its here. If it wasnt posted here then we would'nt know about it, and still wouldn't care.

All comments
 Add your comment (free registration required)


Related news:
Sony Running Unpatched Servers With No Firewall - tech (May 05 2011)
Nightly Tech Reading-Unpatched IE Flaw - tech (Nov 30 2005)

related cheats/trainer:

no results found


 Links
Search results for -Unpatched- :

no records found

 External links