A vulnerability identified as critical has been detected in XianYuLauncher up to 1.5.4. This affects an unknown part. The manipulation leads to improper authentication.
This vulnerability is listed as CVE-2026-48991. The attack must be carried out locally. There is no available exploit.
You should upgrade the affected component.