CVE-2026-0776: (0Day) Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the discordrpc module. The product loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-27057.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0776?
CVE-2026-0776 has been classified as a high-severity vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2026-0776?
To fix CVE-2026-0776, update the Discord Client to the latest version provided by Discord that addresses this vulnerability.
Which versions of Discord Client are affected by CVE-2026-0776?
CVE-2026-0776 affects all versions of the Discord Client prior to the patched release that addresses this vulnerability.
Can CVE-2026-0776 be exploited remotely?
CVE-2026-0776 cannot be exploited remotely as it requires local access to the affected system.
What are the potential impacts of CVE-2026-0776?
The potential impact of CVE-2026-0776 includes unauthorized privilege escalation which may allow attackers to execute arbitrary code with elevated permissions.