Executive brief
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Affected products
- PyPI red-discordbot
Junglewise Threat Intelligence
CVE-2024-39905: PYSEC-2026-1865 - Red-DiscordBot vulnerable to Incorrect Authorization in commands API
CVE-2024-39905 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: red-discordbot (PyPI). Vendors: PyPI.
Related threats
- Duplicate Advisory: Unauthorized privilege escalation in Mod module
- PYSEC-2020-267 - Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users w
- PYSEC-2020-266 - Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord
- PYSEC-2020-265 - In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with spe