## [MC-284912] Player Reporting system vulnerable to automated mass-report botting leading to unfair bans
* Status: Open
* Resolution: Unresolved
* Affects Version/s: 1.19.1, 1.20.4, 1.21, 1.22
* Component: Chat / Multiplayer Security
* Priority: Blocker
## Description
multiplayer bans without human verification. This mass ban reporting exploit completely bypasses standard server-side protections and allows bad actors to weaponize the safety reporting tool to grief innocent players, prominent content creators, and server administrators.
------------------------------
## Steps to Reproduce
1. Log into a public multiplayer server using a legitimate Minecraft account.
2. Trigger an automated bot script (external to the client) to send 100+ uniquely signed cryptographic chat report packets targeting the innocent player's UUID.
3. Observe the target player's connection status.
## Observed Result
The target player is abruptly disconnected from the server. Upon trying to reconnect to any multiplayer server, they are met with the official ban screen: "You have been banned from multiplayer Minecraft." No human review occurs before the ban is finalized.
Please sign in to leave a comment.
0 Comments