Avatar Editor "Advanced" Section Allows Equipping Any Item

bvetterdays · May 15, 2024, 12:35am

There is a critical bug in the “Advanced” section of the Avatar Editor that allows users to equip any item on Roblox, including offsale items and limited items they do not own. This bug also causes the equipped item to appear under the user’s equipped items on their profile page and in their profile picture, as well as in-game too.

Steps to Reproduce:

Open the Roblox website and log in to your account.
Navigate to the Avatar Editor.
Click on the “Advanced” button in the Avatar Editor.
Enter the asset ID of any item, including offsale or limited items.
Click “Save” to equip the item.
Check your profile page and profile picture or join a game to see the item appear as equipped.

https://x.com/Roblox_RTC/status/1790539812732035374

Enjoy this while it lasts… I wonder if Roblox will be able to roll back the profile pictures that have the glitched assets on them or not

Jokes aside; it’s concerning how things like these can slip through the cracks at Roblox and cause such huge vulnerabilities. Engineers should be more careful when making changes in these areas.

bvetterdays · May 15, 2024, 12:47am

Glitched accessories also display in-game. Crazy

SaintofHavoK · May 15, 2024, 12:49am

Can confirm, it’s exceptionally easy to replicate.
Notes were made somewhere else I saw, that it only work if you already have an accessory equipped, however, once you’ve equipped the first item you want, you can then remove the first item, and equip 9 more that the user doesn’t own.

Noble_Draconian · May 15, 2024, 1:04am

It isn’t just profile pictures, you can wear any avatar asset into games too. I don’t own the “Emerald Claw” bundle, but I’m able to wear it right now:

Gonna enjoy wearing this offsale bundle I don’t own while it lasts

Zenuux · May 15, 2024, 1:07am

The items showing in-game is what makes it even more insane of a bug

c1rcuitbent · May 15, 2024, 1:11am

trying to add a ban hammer no longer works

okay it seems to work now, i had a gear equipped already apparently

cpguy5089 · May 15, 2024, 1:12am

I can’t seem to replicate this - either it was fixed within the past few minutes or I’m just outright unable to replicate it for some reason.

I put the IDs of assorted items (limiteds, non limiteds, offsales) into my advanced. It lets me save, however it simply ignores/removes any items I don’t have permission to wear (items I don’t own)

bvetterdays · May 15, 2024, 1:13am

Still working for me. I saw some people mentioning you need to have at least one owned accessory already equipped, so maybe try that.

cpguy5089 · May 15, 2024, 1:14am

Also tried with owned stuff equipped, still nothing. If you can get it working still, I’d just put my issues on me not knowing the fine details on how to perform it.

Edit: Seems like this only works if I have no items equipped, opposed to having at least one item equipped.

Edit 2: Now I can’t replicate it again…nice…

HugeCoolboy2007 · May 15, 2024, 1:23am

Can’t replicate this

WaviestBalloon · May 15, 2024, 1:23am

I would personally like to say thank you to Roblox for hiring me! Looking forward to moderate every asset by spamming “Disapprove”!

bvetterdays · May 15, 2024, 1:26am

This seems to have been patched

Not sure what Roblox is going to do about those who have already abused the glitch and equipped items they don’t own. I’ll update this thread if they roll anything back

cj1705 · May 15, 2024, 1:26am

It used to work for me but looks like it might be patched atleast for me

dfgfdgfdsyhdgfyh · May 15, 2024, 1:27am

If anyone is willing to test this for themselves, head to Swagger UI, and then go to Avatar V2, and then “set-wearing-assets”

The Following Code Would Be Inserted:

{
  "scales": {
    "height": 1,
    "width": 1,
    "head": 1,
    "depth": 1,
    "proportion": 0,
    "bodyType": 0
  },
  "playerAvatarType": "R6",
  "bodyColor3s": {
    "headColor3": "A3A2A5",
    "torsoColor3": "A3A2A5",
    "rightArmColor3": "A3A2A5",
    "leftArmColor3": "A3A2A5",
    "rightLegColor3": "A3A2A5",
    "leftLegColor3": "A3A2A5"
  },
  "assets": [
    {
      "id": 100301459,
      "name": "iBot Left Arm",
      "assetType": {
        "id": 29,
        "name": "LeftArm"
      },
      "currentVersionId": 10762901443
    },
    {
      "id": 100301817,
      "name": "iBot Right Arm",
      "assetType": {
        "id": 28,
        "name": "RightArm"
      },
      "currentVersionId": 10762901453
    },
    {
      "id": 100301774,
      "name": "iBot Left Leg",
      "assetType": {
        "id": 30,
        "name": "LeftLeg"
      },
      "currentVersionId": 10762901456
    },
    {
      "id": 100301874,
      "name": "iBot Right Leg",
      "assetType": {
        "id": 31,
        "name": "RightLeg"
      },
      "currentVersionId": 10762901465
    },
    {
      "id": 100301953,
      "name": "iBot Torso",
      "assetType": {
        "id": 27,
        "name": "Torso"
      },
      "currentVersionId": 10762901473
    },
    {
      "id": 11573370910,
      "name": "Anime - Mood",
      "assetType": {
        "id": 78,
        "name": "MoodAnimation"
      },
      "currentVersionId": 17941687908
    },
    {
      "id": 100302996,
      "name": "iBot Head",
      "assetType": {
        "id": 79,
        "name": "DynamicHead"
      },
      "currentVersionId": 20280670549
    }
  ],
  "defaultShirtApplied": true,
  "defaultPantsApplied": true,
  "emotes": [
    {
      "assetId": 4940592718,
      "assetName": "Confused",
      "position": 1
    },
    {
      "assetId": 7466046574,
      "assetName": "Quiet Waves",
      "position": 2
    },
    {
      "assetId": 7202898984,
      "assetName": "Show Dem Wrists - KSI",
      "position": 3
    },
    {
      "assetId": 4689362868,
      "assetName": "Sleep",
      "position": 4
    },
    {
      "assetId": 6865011755,
      "assetName": "Block Partier",
      "position": 5
    },
    {
      "assetId": 5915781665,
      "assetName": "Panini Dance - Lil Nas X (LNX)",
      "position": 6
    },
    {
      "assetId": 14900153406,
      "assetName": "TWICE Feel Special",
      "position": 7
    },
    {
      "assetId": 6865013133,
      "assetName": "Cha Cha",
      "position": 8
    }
  ]
}

You’re avatar would become iBot.

JuanGamerPlayz_RBLX · May 15, 2024, 1:33am

Tried replicating it and it seems that it was unsuccessful… The only thing it shows me wearing is the expression “Anime - Mood”

dfgfdgfdsyhdgfyh · May 15, 2024, 1:36am

This was apparently patched, awhile ago this was functional.

TimeFrenzied · May 15, 2024, 1:38am

so… i think it works in catalog avatar creator edit: nvm

dfgfdgfdsyhdgfyh · May 15, 2024, 1:38am

A message to anyone who uses these and currently is, do not edit you’re avatar, you’re avatar will be reset.

JuanGamerPlayz_RBLX · May 15, 2024, 1:39am

It is not necessarily, someone, it could have been just a bug on the back end of the website. Luckily, it was now patched, but we need to wait until Roblox engineers address this issue with updates.

c1rcuitbent · May 15, 2024, 1:39am

already happened lmfao

(not linking to it so I don’t get raided by the roblox pinkertons)