Auth bypass in Duck-organization Questbot

CVE-2026-47195

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the comman…

Vulnerability class: Broken Access Control

EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.