CVE-2026-47196
HighCVSS 8.4Summary
Quest Bot is an open-source Discord bot. In versions prior to 1.1.6, the automod add command trims user input but does not reject an empty result, leading to the deletion of all non-bot guild messages.
Risk Assessment
The organization may experience loss of important messages, which can impact team communication and collaboration.
Recommendation
It is recommended to update the bot to version 1.1.6 or newer to mitigate this vulnerability.
Original NVD description (English source)
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only whitespace stores an empty word. The message listener later checks content.includes(""), which is always true, causing the bot to delete every non-bot guild message. This issue has been patched in version 1.1.6.