Impact

An RCE exploit has been discovered in the Act module. With this exploit, Discord users can use specially crafted messages to perform destructive actions and/or access sensitive information.

Patches

This exploit has been patched in commit 6b9f3b86

Workarounds

Unloading the Act module with unload act can render this exploit inaccessible.

References

• Commit 6b9f3b86

For more information

If you have any questions or comments about this advisory:

• Open an issue
• Message me on Discord: Zephyrkul#1089
• Post your question in #support-othercogs in the cog support server