PatchTheCVECVE-2022-31164: Tovy is a a staff management system for Roblox groups
CVE-2022-31164 is a high-severity flaw (CVSS 7.5) affecting tovy. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 48%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2022-07-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-31164?
tovy: upgrade to 0.7.51. Exact commands for each OS are on this page.
Is CVE-2022-31164 being exploited?
CVE-2022-31164 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-31164 affect?
CVE-2022-31164 affects tovy. Severity is high (CVSS 7.5). Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version
How urgent is CVE-2022-31164?
Priority 44/100. High severity; Remotely exploitable, no login, no user action