EUVD-2026-91159
GHSA-3q99-x36r-rchh
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because the attacker must occupy the signaling/MITM path; PR:N/UI:N as no client auth or interaction is needed; S:C and C:H/I:H reflect compromise of the separate E2EE media session, with no availability impact.
Primary rating from Vendor (Bugcrowd).
CVSS VectorVendor: Bugcrowd
Lifecycle Timeline
2DescriptionCVE.org
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client) could cause affected clients to accept an unauthorized member into the end-to-end encrypted media session, compromising the confidentiality and integrity of audio and video.
AnalysisAI
Discord libdave before 1.2.0 can accept an unauthorized participant into an end-to-end encrypted media session because it does not reject an MLS Welcome message whose group roster contains an unrecognized user ID. An attacker who controls the DAVE signaling path, such as a malicious or compromised Discord voice gateway or an equivalent position able to add, alter, or withhold MLS signaling, can exploit this to compromise the confidentiality and integrity of voice and video content; no client authentication or user interaction is required, but the signaling-path requirement raises the practical bar. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to control the DAVE signaling path for the target voice/video session - specifically a malicious or compromised Discord voice gateway, or an equivalent position able to add, alter, or withhold MLS signaling messages to a client (reflected as AT:P in the CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CNA-assigned CVSS 4.0 base score is 9.4 (Critical), driven by network vector (AV:N), low complexity (AC:L), no required privileges or user interaction (PR:N/UI:N), and High confidentiality and integrity impact on both the vulnerable system and subsequent systems (VC:H/VI:H/SC:H/SI:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to libdave 1.2.0 or later, applying the v1.2.0 release (https://github.com/discord/libdave/releases/tag/v1.2.0/cpp) or cherry-picking commit 9686fbaea864aa19f0675e486672b6a77811b6a1, which re-enables rejection of Welcome messages containing an unrecognized participant. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every place libdave is present - official Discord desktop and mobile clients, embedded or vendored copies inside internally built applications, bots, and any custom voice integrations - and record exact versions; because the vendor-released patch is libdave 1.2.0, prioritize forcing end-user Discord clients to update to current builds that bundle 1.2.0 and above, and suspend use of Discord voice for highly sensitive or regulated discussions until version confirmation is complete. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunA
A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Rated high severity (C
Discord-Recon is a bot for the Discord chat service. Rated critical severity (CVSS 9.8), this vulnerability is remotely
A stored Cross-site Scripting (XSS) vulnerability exists in the Anchorr Discord bot's web dashboard User Mapping dropdow
Discord-Recon is a bot for the Discord chat service. Rated high severity (CVSS 7.5), this vulnerability is remotely expl
Out-of-policy local file disclosure in OpenClaw's Discord integration (@openclaw/discord) before 2026.9.3 allows an auth
Authorization bypass in the Discord integration for OpenClaw (versions before 2026.7.1) lets a lower-trust sender who ca
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today