Skip to content

v2.2.4 - Security fix, 29-bug audit, camera lock & item stats

Choose a tag to compare

View all tags
@hldblc hldblc released this 13 Jul 18:48
v2.2.4
89bce5d

This release updates BOTH DLLs — AdminPanel.dll (client, v2.2.4) and AdminPanelCompanion.dll (v2.1.1). Dedicated-server owners: update the companion on the server too — the security fix below lives there.

🔒 Security (important for dedicated servers)

  • Fixed a critical privilege-escalation hole. Valheim lets a client forge the "sender" of a routed RPC, so a malicious player could spoof themselves as an admin and gain full admin powers on your server. The companion now re-stamps the true connection ID before any admin action runs — closing this and a related server-impersonation flaw. It's a no-op for honest players.

🐛 Fixes (29-bug audit)

  • Fixed the resize runaway from v2.2.3 (the window could stretch off-screen and get stuck).
  • Server hardening: RPC bounds-checks that block mass-spawn / malformed-packet exploits.
  • Many crash / perf / correctness fixes: sort-dropdown IMGUI crash, give-target silently retargeting when a player leaves, teleport bookmarks corrupting on comma-decimal (EU) locales, per-frame allocations now cached, config no longer thrashes the disk on every click/keystroke, extra null guards, and more.

✨ New

  • Camera locks while the panel is open (just like the inventory) — moving the mouse no longer rotates your view.
  • Item rows show stats, not codes — weapon damage, armor, block, food values, and consumable effects.
  • Status-effect browser now lists everything grouped into categories (Boss Powers, Set Bonuses, Potions & Mead, Debuffs, Comfort, Other) with a short description of what each effect does.
  • Resizable panel that remembers its size & position; text in Valheim's native Norse font; clean per-tab sizing.

Install: drop both DLLs into BepInEx/plugins (replace the old ones) and press F7. Dedicated servers also need the updated AdminPanelCompanion.dll.

Assets 4
Loading