Capcom pulls Street Fighter V from stores and shuts down its online play over a security flaw

Capcom has made an unusual move with one of its best-known fighting games: Street Fighter V has been temporarily pulled from sale on the PlayStation Store and Steam, and its online features have been disabled. According to Vandal, the reason is a security issue tied to PHP, the programming language the game uses in its PS4 and PC versions. The Japanese company says it is working on a fix, but for now there is no date for things to get back to normal.

This news matters more than it might seem. Although the game came out in 2016 and already has a successor, it is still part of the competitive memory of an entire generation of fighting game players, and there are still communities using it to practice, play casually or keep their local tournaments alive. A game vanishing from stores and losing its servers, even temporarily, once again raises an uncomfortable question: what happens to the things we buy when they depend entirely on the publisher's infrastructure?

What you need to know

• Street Fighter V has been temporarily removed from the PlayStation Store and Steam.
• All of the game's online features are disabled on PS4 and PC.
• The cause is the need to strengthen security related to PHP, a language widely used in web development.
• Capcom had already announced emergency maintenance in the days leading up to this.
• There is currently no confirmed date for the return of the game or its servers.

What happened and who it affects

As reported by Vandal, Capcom had spent several days carrying out emergency maintenance on the game. That notice, which many players took to be a one-off issue, eventually escalated into a gradual removal of the game from both digital stores. The company explains that online content has been taken offline while it strengthens the security of the PHP-based component used by the PlayStation 4 and Steam versions.

Who is affected is clear: anyone who wants to buy the game right now won't be able to on those platforms, and those who already own it lose everything that relies on online play. In a fighting game, that is no small detail: ranked matches, lobbies with friends and much of the experience that keeps the community alive all depend on being connected. Offline mode remains as a fallback, but for competitive players it is little consolation.

Why PHP, and why now

PHP is a technology widely used in web services, so it makes sense for it to be part of the online layer of a game from this generation. The source does not detail the exact nature of the vulnerability or whether any specific incident has been detected, so it's best not to speculate about its scope. What Capcom's reaction does make clear is that the issue was considered serious enough to justify shutting down the service rather than keeping it running with the risks involved.

Our take

Here at Underworld Lordz, we're clear on this: if there is a real security risk, shutting down the servers is the right call. Nobody wants a decade-old game to become an entry point for attacks that compromise players' accounts or data. In that sense, Capcom deserves credit for not sweeping the problem under the rug.

That said, the way it has been handled raises questions. Pulling a game from stores without offering even a rough timeline creates uncertainty in the community, especially for small tournament organizers and content creators who still work with the game. If you run a retro competitive channel, have a local event planned or have a video series in progress, right now you don't know whether you'll be able to pick it back up in a few weeks or whether you'll need to change plans. A bit more transparency about the scope of the flaw and the estimated timeline would help enormously.

There is also a bigger picture: this case is a reminder of how fragile the life of online games is. When competitive play depends entirely on someone else's servers, players have no control at all. For the fighting game scene, which has always prided itself on keeping its classics alive for years, this should spark a serious conversation about preservation, long-term support and alternatives such as local play or community-run servers.

What do you think?

Were you still playing Street Fighter V, or have you fully moved on to its successor? Do you think Capcom handled this well, or should it have communicated more? Drop by the team chat or our Discord and let us know: does it worry you that your favorite games could disappear overnight because they depend on servers?