How do I patch Unity?
I don’t see the patch button in the Unity Hub interface.
You can either download and use one of the patched versions of Unity, or you can make a build with your current version and then patch the resulting executable. You can find links for the patcher, patched versions, as well as the remediation guide here: CVE-2025-59489 Patcher Tool
That being said, you don’t patch the editor itself
In modern products, patches are installed with the click of a button or automatically.
This is common practice. This also eliminates many problems and vulnerabilities, such as file substitution, post-download checksum calculations, etc.
Are you suggesting I search for a patch for my version on a forum somewhere?
The last time I did that was in 1998.
The patch link you provided does not contain my version 2021.3.10f1
And I have no idea if it’s 2021.3 xLTS or 2021.3 LTS
There are some version naming conventions that do not involve letter abbreviations.
Why can’t we just make a patch button in Unity Hub?
It’s everywhere. In Telegram, Discord, Google Chrome.
We don’t download patches like in 1998 to patch programs.
And for development, this is doubly important because we’re responsible for whether our game will launch after the patch. Will the editor and all its assets work after the patch?
Everything should be done automatically—compatibility checking, patching, rolling back, etc. That’s how modern development works.
If your version is 2021.3.10f1, then the latest patch version would be: 2021.3 LTS: 2021.3.45f2
The xLTS is for extended support, which would be if you have a support contract or are an enterprise customer
Am I correct in understanding that a single vulnerability requires reinstalling the entire development environment?
You gave me a link to install the new version of Unity.
So, a vulnerability appears and we have to reinstall the entire development environment?
The vulnerability exists in the runtime. You don’t need to fully install the Unity editor if you don’t want. You can also just run the patcher to patch your executable to fix the vulnerability there.
I provided a link because you asked me what version was right for you
What exactly is a “patched version of Unity”? Do we just download the latest LTS of the version we are using? This is all a mess. I’m using 4 different versions of Unity for my games. If you could at least advise which Unity version I need to download if I am using Unity 2022.3.56f1.
This link contains the list of Unity versions that have the fix:
That is what Unity Application Patcher does, which is downloadable from the link above.
Ok so we need to do a fresh install of the editor? Just can’t download a new exe?
There are two options for resolving the vulnerability:
- Upgrade to a newer release of Unity (one of the versions released yesterday). Yes, this means installing a whole new Unity version; we do not offer any kind of incremental install.
- Run the binary patcher tool against your already-built game. This avoids the need to install any Unity releases, but only protects the specific build you run it against, so if you make new builds in the future you’d also need to run the patcher tool against them as well.
While we will explore ways to make this process easier in the future, we wanted to make these resolutions available to everybody now, as further delays would have increased the risk of a bad actor finding and exploiting the vulnerability.
W are currently using a version of Unity 6.0 that is not the latest (e.g., 6000.0.50f1). The only f2 version available is 6000.0.58f2.
Our team does not upgrade to the latest point release until we’ve gone through a thorough validation and testing process. Will there be f2 versions of all point releases?
No. We recommend using the patcher tool for now, and then updating to the latest point release once you’re able.
No, we are not going to be releasing custom editors for every single affected point release. There have been over 800 of those and we cannot retest all of them in a reasonable amount of time.
If you cannot upgrade the Unity version, our recommendion is to use Unity Application Patcher to patch your builds after making them instead.
What is the patch update for 6000.0.33f1?
It is 6000.0.58f2.
Thank you for your response.
From the CVE announcement it sounded like there would be patches available for all versions of the Unity Editor:
We strongly recommend you download the patched update for your version of the Unity Editor.
In fact, the only versions of the Unity Editor that will be patched are the last point release versions of each major version.
I suggest updating your CVE announcement to prevent further confusion.
Another question is if I have other unity versions that are also needing the patch but I don’t install since I probably won’t return to those projects for a little bit am I ok to just leave them how they are right now?
Is this a released product? Editor itself is not vulnerable, it is the built games that. You can use Unity Application Patcher to patch your built games without downloading a new editor.
My other projects are still works in progress and have not been published as a game yet
So then they would still be in the editing stage since they are not released products, ok that’s good to know thank you very much