Auth bypass in Duck-organization Quest-bot

CVE-2026-47163

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.1, any guild member who can invoke slash commands can use /automod add, /automod remove, and /automod list because the command…

Vulnerability class: Broken Access Control

EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.