---
id: CVE-2025-61680
title: >-
  Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft
  server management
summary: >-
  Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft
  server management. Versions 0.1.0 through 2.0.6 stores passwords using VS
  Code's configuration API which writes to settings.json in plaintext. This
  issue is fixed …
severity: none
cwe:
  - CWE-256
published: '2025-10-03'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:10:00.563'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-61680'
references:
  - url: >-
      https://github.com/jaketcooper/Minecraft-rcon/commit/31272b541482d095d1578855c2b571268eb9b877
    label: security-advisories@github.com
  - url: 'https://github.com/jaketcooper/Minecraft-rcon/releases/tag/2.1.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/jaketcooper/Minecraft-rcon/security/advisories/GHSA-4m33-hxqw-7j77
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00352
epssPercentile: 0.26731
ingestedAt: '2026-10-08T22:11:53.779Z'
---

## Overview

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.