CVE-2026-47169

Name of the Vulnerable Software and Affected Versions Quest Bot versions prior to 1.0.3

Description A flaw in the AutoRole feature allows a user with Manage Server or ManageGuild permissions, but lacking Manage Roles or Administrator privileges, to configure the bot to assign an arbitrary role to new members. If the assigned role possesses Administrator permissions and is positioned below the bot's highest role, an attacker can use a controlled account to join the server and obtain full administrative access.

Recommendations Update to version 1.0.3.