CVE-2026-47195
HighCVSS 7.1Summary
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member, allowing users without channel-level moderation permissions to delete messages or change slowmode.
Risk Assessment
The organization may be exposed to unauthorized actions by users, potentially leading to loss of control over content in Discord channels.
Recommendation
It is recommended to update the bot to version 1.1.6 or newer to mitigate this issue.
Original NVD description (English source)
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the command is run. A user denied channel-level moderation permissions can still delete messages or change slowmode through the bot. This issue has been patched in version 1.1.6.