Skip to content
OpenAdvisories

Product · duck-organization

questbot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-47197

    Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands

    Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord role hierarchy, as long as the bot itself outranks the target. This bypasses Disco…

    duck-organization questbot
  • High 7.1
    CVE-2026-47195

    Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands.

    Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the command is run. A user den…

    duck-organization questbot
  • High 8.4
    CVE-2026-47196

    Quest Bot: Empty automod rule causes every guild message to be deleted

    Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only whitespace stores an empty word. The message listener later checks content.includes("")…

    duck-organization questbot