Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/07 2:34 p.m.8 views

PYSEC-2026-1865 Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...

6.9CVSS6AI score0.0041EPSS
SaveExploits0References7
Rows per page
Query Builder