HexBrain

Rockstar Games · Report #1278261

Uninstalling Rockstar Games Launcher for Windows (64-bit), then reinstalling keeps you logged in without authentication

Validstatus
lowseverity
$250bounty
28upvotes
7 Apr 2022disclosed

Summary

In this report, the researcher identified a potential weakness in Rockstar Games Launcher that caused the application to retain profile data on the local machine, even after the application was uninstalled. This included auto sign-in flags, resulting in automatic sign-ins when reinstalling Rockstar Games Launcher. To address this, an option was added to the application's Uninstaller to remove all stored profile data from the device.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original