CVE-2026-24332

CVE-2026-24332 – Discord Invisible Mode Presence Leak Summary This repository documents CVE-2026-24332, an unpatched privacy‑impacting issue affecting the Discord client and API. The vulnerability allows external clients to determine whether a user marked as Invisible is actually online. Details...

Exploit for CVE-2026-24332

CVE-2026-24332 – Discord Invisible Mode Presence Leak Summ...

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

PT-2026-3920

Name of the Vulnerable Software and Affected Versions Discord versions through 2026-01-16 Description The software allows gathering information about whether a user’s client state is Invisible and not actually offline. The response to a WebSocket API request includes the user in the presences arr...