CVE-2026-47195 – Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands.

CVE ID :CVE-2026-47195

Published : 2026年6月12日 11:52 | 1 小时，31 分钟 ago

Description :Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the command is run. A user denied channel-level moderation permissions can still delete messages or change slowmode through the bot. This issue has been patched in version 1.1.6.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…