Local Privilege Escalation Vulnerability in Discord Client
CVE-2026-0776

7.3HIGH

Key Information:

Vendor

Discord

Status
Client
Vendor
CVE Published:
23 January 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-0776?

The Discord Client contains a local privilege escalation vulnerability that enables local attackers to gain elevated privileges by exploiting the discord_rpc module. By triggering this vulnerability, an attacker with access to execute low-privileged code can manipulate the application's file loading mechanism to execute arbitrary code within the context of another user, thereby compromising system security.

Affected Version(s)

Client 1.0.9196

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-0776
Created by 0x18F

References

https://www.zerodayinitiative.com/advisories/ZDI-26-040/
x_research-advisory

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.