Experts claim to have discovered a malicious Trojan file that may cause havoc on users' computers.
Roblox, on the other hand, has reacted to the allegation, calling it "misleading" because the problem is with third-party software, not them.
It's known as Synapse X, and it's used to store cheat codes.
A hacker can break apps, as well as delete or seize your data, once a backdoor is implemented.
The exploit was detected on a client's OneDrive, according to Avanan, who believes the customer "uploaded it by accident."
"What's particularly alarming about this assault is that Roblox is predominantly played by children," the business said.
"This implies it may be installed quickly on a home PC with little or no antivirus protection."
With so many people now working from home, experts say it poses a risk to firms.
"It's not unrealistic to believe that children may play Roblox on their parents' computers and install the file," the business added.
"The need for zero-trust security is nicely illustrated by this malicious file.
"Threats are everywhere in this disjointed, work-from-home world, including in children's games."
Avanan stated that it has contacted Roblox about the issue.
"This article reflects a deceptive depiction of this vulnerability, which is in Synapse X, not Roblox," Roblox informed The Sun.
"It's also against our Terms of Service to use third-party services to go around certain systems."
"We forbid attempts to evade these measures or otherwise breach our platform restrictions," says Roblox.
Users should avoid downloading files from dubious websites and utilize virus detection tools on file-sharing programs like OneDrive or Google Drive.