Skip to content

Claimed Chunks security breach issues and other troubles #310

@GedeonGrays

Description

@GedeonGrays

Your GTNH Discord Username

gedeongrays

Mod Version

2.2.40

Bug Report

I tried to thoroughly test all of Server Utilities' security features, but there are likely still some remaining issues. However, I believe that fixing the issues I've identified will be enough to consider Claimed Chunks' protection truly reliable.

  1. Ignoring PvP status (damage players regardless of Enable PVP):
  • Bow
  • Splash Potions
  • FakePlayer
  1. Players can interact with blocks inside other players' Claimed Chunks:
  • Crafting Table can be opened and used
  • Anvil can be opened and broken during use
  • Wooden Door can be opened/closed
  1. Projectiles can interact with blocks inside other players' Claimed Chunks:
  • The released Arrow can press the wooden Button
  1. Players can interact with entities inside other players' Claimed Chunks:
  • Snowballs, Arrows, Eggs, and the Fishing Rod's Hook can break Item Frames and Paintings and attack animals
  • Animals can be leashed (not tied to the Fence), and also untied from the Fence
  • Shears can shear animals
  • Bucket can milk cows, and Bowl can make Mushroom Stew with Mooshroom
  • Saddles can be placed on animals
  • The player can mount animals, boats and minecarts
  • The player can tame animals
  • The player can paint sheep and wolf collars
  • The player can place any item in the Item Frame and rotate it
  • The player can push the Minecart with Furnace by right-clicking and put Coal inside
  • The player can open the Minecart with Chest and Minecart with Hopper and place/remove the contents
  1. Griefing other players' Claimed Chunks from outside:
  • Liquids may leak inside
  • Grass and Flowers can be grown into Claimed Chunks using Bone Meal outside
  • Trees and large mushrooms can grow into Claimed Chunks
  • Melons and Pumpkins can grow into Claimed Chunks
  • Pistons can push blocks into Claimed Chunks
  • The player can summon an Iron Golem or Wither on the edge of a Claimed Chunk (causing the Block of Iron or Wither Skeleton Skulls and Soul Sand inside the Claimed Chunk to disappear)
Video demonstration
Minecraft_1.7.10_2026-06-07_14-47-58.mp4
Minecraft_1.7.10_2026-06-07_19-09-00.mp4
  1. Sync issues (I think):
  • If you right-click a block inside other players' Claimed Chunks with food/potion in hand several times, the food/potion will be used automatically
Video demonstration
Minecraft._1.7.10_2026-06-07_18-35-37.mp4
  • You can place blocks or destroy blocks on the client side (eg liquids)
Video demonstration
Minecraft_1.7.10_2026-06-07_18-49-27.mp4
  1. Duplication using other players' Claimed Chunks:
  • The player can dupe Iron/Snow Golems and Pumpkins, Withers and Wither Skeleton Skulls, and attachable blocks (such as Ladders) by placing a Pumpkin or Wither Skeleton Skull on the edge of a Claimed Chunk
Video demonstration
Minecraft_1.7.10_2026-06-07_14-33-52.mp4
Minecraft_1.7.10_2026-06-07_19-19-56.mp4
  1. Other (I'm not sure what category this should be in ¯\_(ツ)_/¯):
  • Boats can be placed inside other players' Claimed Chunks
  • Boats can break Lily Pads inside other players' Claimed Chunks
  • The player can ignite TNT with a flaming arrow (bow with the Flame I enchantment) inside other players' Claimed Chunks

P. S. That's all I could find that I think needs correction. I'd be happy to double-check anything or provide any additional information if needed. Thank you for your time.

Java Version

Java 8

Mod List or GTNH Pack Version

Client and server mods are identical:

  • +unimixins-all-1.7.10-0.3.1
  • gtnhlib-0.11.4
  • ServerUtilities-2.2.40

Final Checklist

  • I have searched the issues and haven't found a similar issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions