A security flaw has been discovered in Unity, the widely used game engine, affecting games and applications developed on the platform. The company urged developers to “take immediate action” to protect their games and apps and shared a fix to address the issue. However, Unity confirmed that the vulnerability had not been exploited and had no impact on users.
The security flaw affects all games and apps built on Unity 2017.1 and later on Windows, Linux, Android and macOS, the company said on Friday. The vulnerability was discovered by security researchers and has not yet been exploited. Developers can work on a fix and Unity will roll out a patch to address the vulnerability.
The company has asked developers whose projects are still in active development to download patched updates to the Unity editor before building and releasing their games to ensure release builds are fully protected.
Unity urges developers to implement updates
For existing games and applications, Unity has asked developers to download the update, recompile and republish the application. The company also provides a tool for developers who don’t want to rebuild their projects to provide patches for existing applications starting with Unity version 2017.1 for Android, Windows, and macOS.
Developers are now busy patching their games, and some have even removed their games from online stores. On Saturday, Obsidian, the developer of “The Outer Worlds 2,” said it would temporarily remove some games that use Unity from its digital storefront. The games removed from the online store include Grounded 2, Avowed, Pillars of Eternity, Pillars of Eternity II: Deadfire and Pentiment.
A security vulnerability was recently discovered that affects our games using Unity.
As a precaution and to ensure your safety, we have temporarily removed the following titles and products from the digital storefront while we implement the necessary updates to resolve the issue: …
— Obsidian (@Obsidian) October 3, 2025
“We apologize for any inconvenience this may have caused. Our teams are working hard on fixes and will restore these games as soon as possible. We will provide more information once they are available again. We also encourage players who have downloaded these games to update as soon as the patch becomes available,” Obisidian said in a post on X.
For games and apps built with Unity on Android, the company says malware scanning and other security features built into the operating system will help reduce risk, but patches will still be needed.
“For Windows-based applications, Microsoft Defender has been updated to detect and block this vulnerability. Valve will provide additional protection to the Steam client,” Unity added.
