Discord vulnerabilities and fixes

CVEs that mention Discord, ranked by priority. 6 tracked.

Discord has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-10-24. Highest priority: CVE-2026-59545 (score 43/100).

• CVE-2026-59545 HIGH 8.1 Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.
• CVE-2026-67428 HIGH 8.5 Flyto2 Core is an execution kernel for automation and AI-agent workflows
• CVE-2026-62192 HIGH 8.1 UPGRADE OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild acti
• CVE-2026-115932 CRITICAL 9.6 When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk,
• CVE-2026-56832 HIGH 8.8 PraisonAI is a multi-agent teams system
• CVE-2026-62206 HIGH 7.1 UPGRADE OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions

FAQ

How do I fix Discord vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Discord being exploited right now?

None of the tracked Discord CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Discord CVE should I patch first?

CVE-2026-59545 currently ranks highest (43/100): Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions..

← Back to latest CVEs