CD Projekt Red urges caution with Cyberpunk 2077 mods, says PC gamers could be affected by vulnerability
CD Projekt Red says that for now, users should refrain from using files from unknown sources - they should have simply said all mods, since you cannot trust unknown modders on the internet.
Last week, we reported that CD Projekt Red, developers of the most anticipated and disappointing game in recent memory, had released official modding tools and support for Cyberpunk 2077. Now, the company is advising caution while installing mods in light of a security issue.
In a tweet posted on Tuesday, the customer support account for CD Projekt Red advised users who planned on using Cyberpunk 2077 mods to “use caution”. Explaining further, the team said they have been made aware of “a vulnerability in external DLL files the game uses which can be used to execute code on PCs” and that “issues will be fixed ASAP”.
If you plan to use @CyberpunkGame mods/custom saves on PC, use caution. We've been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.— CD PROJEKT RED CS (@CDPRED_Support) February 2, 2021
CD Projekt Red goes on to state that for now, users should refrain from using files from unknown sources - they should have simply said all mods, since you cannot trust unknown modders. Unfortunately, the nature of the game and the obvious complexity involved means that making your own mods is out of the question for most gamers. The safest way to continue using mods is to make sure you get them from reliable sources (your friends don't count) or make your own, if you have the technical wherewithal.
Meanwhile, the developers are yet to patch a new, bothersome bug that was introduced by the first patch update to version 1.1 of the game. We had previously reported that the patch fixed a lot of issues, while also breaking the game entirely, preventing the storyline from progressing when your character is supposed to receive a call from another person called Takemura. CD Project Red suggested a workaround, but the promised hotfix is nowhere in sight.