You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Security concern : Steam login token present in clear text in the log files #142
I searched existing GitHub issues and did not find this exact bug.
I searched online and did not find a fix for this exact bug.
I asked in the EmuReady Discord GameHub Lite channels and could not solve it there.
I added enough steps to reproduce the exact issue.
I understand that incomplete bug reports may be closed.
Device
any
SoC
any
Android version
any
GameHub Lite version and package
5.1.7
Game or component
any
Issue area
Other
Summary
When playing any steam game, the log file contains the steam login token in clear text, making the log file dangerous to distribute for troubleshooting.
Steps to reproduce
Launch a Steam game through GameHub
Recover the log files generated at Android/data/gamehub.lite/files/log/
Expected result
The Steam login token shouldn't appear in the logs, at least not fully in clear text
Actual result
Beginners who post their logs end up posting their login tokens publicly for everyone
Container settings
any
Logs
Logs are not relevant for this report, and I explained why below.
Logs and troubleshooting notes
I cannot securely post logs containing my own steam login token. I however can post this edited screenshot showing the concerning parts with the token censored
Update : It seems to also log tokens relative to QR code login under different names (accessToken and refreshToken).
I don't know if it logs for other accounts (such as gog and epic games). It should be checked
Activity
SeleDreams commentedon Jul 2, 2026
Update : It seems to also log tokens relative to QR code login under different names (accessToken and refreshToken).
I don't know if it logs for other accounts (such as gog and epic games). It should be checked