Command exploit
Not sure if this is intended or a bug, but when cheats are deactivated (Cheats are set to false in the server.proporties) on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, you can’t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. They can still use this exploit with cheats off, and achievements enabled. I put this as private because I don’t what people to see this and start using the exploit on other servers.
I later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. I’m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.
I also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false.
Environment
Windows 10
Linked Issues
Comments2
History6
Changed description:
Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel,
Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel,
Changed description:
Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, you can’t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. They can still use this exploit with cheats off, and achievements enabled. I put this as private because I don’t what people to see this and start using the exploit on other servers.
Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, you can’t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. They can still use this exploit with cheats off, and achievements enabled. I put this as private because I don’t what people to see this and start using the exploit on other servers.
I later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. I’m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.
Changed description:
Not sure if this is intended or a bug, but when cheats are deactivated
0
I later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. I’m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.
Changed description:
Not sure if this is intended or a bug, but when cheats are deactivated (Che
0
I later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. I’m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.
0I also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false.
Not sure if this is intended or a bug, but when cheats are deactivated (Che
0
I later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. I’m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.
0
Added duplicates link: BDS-1336Achievements can be unlocked through consoleConfirmed
Resolution: Unresolved → Duplicate
MEQS_KEEP_PRIVATE
Thank you for your report!
We're actually already tracking this issue as BDS-1336 (which is a private bug report), so this ticket is being resolved and linked as a duplicate.
Quick Links:
📓 Issue Guidelines – 💬 Community Support – 📧 Customer Support – ✍️ Feedback and Suggestions – 📖 Game Wiki