CVE-2010-2445: freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary...

Security readout for executives and security teams

Affected Freeciv versions can let a malicious game scenario read local files or run commands because embedded Lua functionality exposed unsafe modules and functions. Business urgency is highest where users import scenarios from untrusted sources or run old packaged Freeciv builds. Exposure appears limited to systems running affected Freeciv versions that load scenario content. The bundle does not show evidence of broad enterprise exposure, remotely reachable default services, or current package prevalence. Treat as a targeted-risk cleanup item rather than an emergency, unless affected systems process untrusted scenario files. The impact can be severe on an individual endpoint, but evidence for active exploitation is absent in the bundle. Mitigation focus: Upgrade Freeciv to 2.2.1, 2.3.0, or later supported builds.; Do not load third-party scenarios from untrusted sources.; Remove affected Freeciv versions from managed endpoints where not needed..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.