PT-2026-48860 · Discord · Quest-Bot
CVE-2026-47197
·
Published
2026-06-12
·
Updated
2026-06-13
CVSS v4.0
7.2
High
| Vector | AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
Quest Bot versions prior to 1.1.6
Description
A moderator possessing the necessary Discord permission bit can utilize the bot to perform moderation actions on users who are higher in the Discord role hierarchy, provided the bot itself has a higher rank than the target. This bypasses standard Discord role hierarchy protections, allowing lower-ranked moderators to ban, kick, timeout, untimeout, warn, or rename higher-ranked users.
Recommendations
Update to version 1.1.6.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Quest-Bot