RDR2 game service method allows adding any player to a new Posse without consent

Summary

In this report, the researcher discovered a game service method in Red Dead Online that could be manipulated into allowing an attacker to create new Posses and add any Social Club account to it, without their knowledge or consent. We have resolved this by updating the service method to prevent this type of manipulation and confirmed with the researcher that this behavior is no longer exploitable.