Some randoms somehow got op to my server

[dusty tusk]

2 kids one named Waffler527 and another named MrCoolGuy640 joined my server at 3am sent like 1k diffrent /lp editor commands and gained access to op somehow
How can i fix this

[hushed sail]

I recommend deleting the group that they made, or removing its permissions. Or make another group, and move them to that new group using /lp user <username> parent set <groupname>

Also remove there editor keys by going to lp edtiors website, go to user, find there usernames, and delete it, along with anything else that you do not wish for them to have

Then make sure to run /deop <username> in game

[reef cradle]

do you have vulcan by any chance?

[dusty tusk]

yes

[reef cradle]

what version of vulcan?

can you do /version vulcan for me please?

[dusty tusk]

yea let me ask someone bc I am eating lunch rn

[dusty tusk]

there is no group and ive started a backup I made 7d ago

[dusty tusk]

2.8.3

[reef cradle]

please update to 2.8.6 and above

as that version has a force op exploit

[dusty tusk]

ok ty

[dusty tusk]

They keep getting op somehow

[hushed sail]

Did you update vulcan? And if so, what other plugins do you have?

[reef cradle]

make sure to reset your vulcan config~!!!\

aka delete the vulcan folder

[crisp rune]

They have a free .jar 2.8.5 in their discord if you do not have a license for it.

[reef cradle]

2.8.6*

[crisp rune]

Oh my bad! What she said ! ^

[hidden gate]

2.8.5 is the free version in the vulcan discord.

it has the exploit patched