SECURITY NOTICE - DARKRP GAMEMODE
To DarkRP users, ALL CURRENT KNOWN VERSIONS
It has come to Team Ulysses attention that an exploit exists within the DarkRP gamemode.
This exploit has the dire consequence of allowing NON administrative users to run any Lua code they want as server console. R00T ACCESS!!
The examples that were called to our attention were shown to have the user adding themself as a ULX superadmin using the DarkRP exploit.
This is NOT an exploit of ULX. ANY DarkRP server could be taken advantage of whether it is using ULX or not.
Even if you are not a DarkRP host, the exploit may allow actions to be taken against you as a DarkRP player.
At this point, there is no action we can take to protect our Gmod community family from this exploit other than recommending you stop using the DarkRP gamemode.
AGAIN, we CAN NOT prevent the exploit from occurring. It is inherent to DarkRP. Removing ULX will not fix the exploit.
Please attempt to contact the DarkRP authors and ask them to correct the exploit.
