A vulnerability identified as critical has been detected in XianYuLauncher up to 1.5.4. This affects an unknown part. The manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-48991. The attack must be carried out locally. There is no available exploit.

You should upgrade the affected component.