If you are reporting a vulnerability (such as this one), please review responsible disclosure guidelines and Valve's HackerOne policy before posting.
If you have any doubt about severity, we highly encourage you to reach out to us privately for these cases, or please contact Valve through legal channels.