Steam Brokenpipe Vulnerability Unfixed Months After Report [2026 Update]

As originally reported by TalkEsport, a vulnerability dubbed BrokenPipe allows a standard Steam client service on Windows to elevate any running process to NT AUTHORITY\SYSTEM without prompting for administrator credentials. The researcher disclosed the issue to Valve in March, yet months later the proof‑of‑concept code has gone public and the flaw remains unpatched. While a clean Windows PC is not automatically compromised by merely having Steam installed, malware that already resides on the machine could leverage the bug to gain full system control, dramatically increasing its destructive potential. This lingering security gap arrives ahead of the upcoming CS2 Major circuit, raising alarms among tournament organizers and anti‑cheat providers. For a broader perspective on how sudden security concerns can ripple through the esports ecosystem, see our coverage of LOUD’s upset at Valorant Champions 2026..