This security patch addresses a reported exploit that could affect players with the Steam Overlay disabled. As far as we're aware, the exploit has not been used in the wild. We apologize for any inconvenience caused by the timing of the update releasing shortly before the weekend. (Thanks Jackzebra!)

Edit for v3.26.3.10: shortly afterward, we have released an additional patch to fix another reported potential exploit path. (Thanks euromillions!)

Fixed

• Took a less extreme approach to blocking the exploit fixed in 3.26.3.5, restoring most content. (Thanks Jdance!)

• Boombox links opening original URL, not parsed URL. (Thanks PomPomSaturin!)

• Async-loaded lightning and custom weather prefabs not running static unity event check. (Thanks SomeAussieGamer!)

• Inconsistent ordering exception if server prefab had multiple components of certain types. (Thanks Daniel Willett!)

• Classic Canned Beans skin incompatible with Wild Harvest eating animations. (Thanks Sultan!)

Edit: released another tiny patch (3.26.3.8) to fix validating Unity Events in Event Trigger component. (Thanks SomeAussieGamer!)