Discord Client Uncontrolled Search Path Element LPE (CVE-2026-0776)

Vulnerability Key Information Vulnerability Name: (0Day) Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Vulnerability ID: - ZDI-26-040 - ZDI-CAN-27057 - CVE-2026-0776 CVSS Score: 7.3 - AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Vendor: Discord Affected Product: Client Vulnerability Details: - This vulnerability allows a local attacker to escalate privileges within an affected Discord client installation. The attacker must first execute low-privilege code on the target system to exploit this vulnerability. - The vulnerability resides in the discord_rpc module, which loads files from insecure locations. Attackers can exploit this to escalate privileges and execute arbitrary code within the context of the target user. Additional Details: - 2025-07-08: ZDI submitted the report to the vendor - 2025-09-11: ZDI requested confirmation of receipt of the report - 2025-09-15: Vendor stated that the reported behavior was not a vulnerability - 2025-12-01: ZDI provided additional information regarding the security impact - 2025-12-10: ZDI requested an update - 2025-12-11: Vendor indicated that the reported issue was outside the scope of their bug bounty program - 2025-12-11: ZDI notified the vendor that a 0day disclosure would be published - Mitigation: Given the nature of the vulnerability, the only effective mitigation is to restrict interaction with the product Disclosure Timeline: - 2025-07-08: Vulnerability reported to vendor - 2026-01-09: Coordinated disclosure published - 2026-01-09: Disclosure updated Discoverer: T. Doğa Gelişli

Goal Reached Thanks to every supporter — we hit 100%!

Discord Client Uncontrolled Search Path Element LPE (CVE-2026-0776)