Call of Duty: WWII Is Hacked — Game Pass Players Hit by Dangerous RCE Exploits

An 8-year-old game lands on Xbox Game Pass… and immediately starts hijacking PCs.

“Hey, I just RCE’d your ass.”
— a Notepad message opened live during a Call of Duty: WWII multiplayer match

You thought you were fighting in Normandy. Turns out you were hosting a hacker.

💡 Not a Medium member? You can still read this article in full with [Click here]

Call of Duty: WWII just launched on Xbox Game Pass — and players are getting more than they bargained for.

Within days of the 2017 shooter arriving on Microsoft’s subscription service, reports began flooding in: hackers are using a Remote Code Execution (RCE) exploit to take over other players’ PCs during live multiplayer matches.

And yes — it’s real. Videos show terminals popping up. Notepad messages. Even… explicit content launched on players’ second monitors.

If that sounds insane, it’s because it is.

The version of Call of Duty: WWII that shipped on Xbox Game Pass doesn’t use dedicated servers like Steam’s. Instead, it relies on peer-to-peer (P2P) networking — meaning one player’s machine acts as the match’s server.

That’s where the danger begins.

In a P2P game, the “host”…