CVE-2026-105293

HIGH 8.1

Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall, and themes.install to launch local executables, recursively delete directories, and write files outside the themes directory.

CWE	CWE-22
Vendor	legcord
Product	legcord
Published	Oct 5, 2026

Stay Ahead of the Next One

Get instant alerts for legcord legcord

Be the first to know when new high vulnerabilities affecting legcord legcord are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Legcord / Legcord

1.1.0 ≤ 1.3.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Legcord/Legcord/issues/1163 github.com: https://github.com/Legcord/Legcord github.com: https://github.com/Legcord/Legcord/blob/v1.3.0/src/discord/ipc.ts#L201-L206 github.com: https://github.com/Legcord/Legcord/blob/v1.3.0/src/common/themes.ts#L269-L276 vulncheck.com: https://www.vulncheck.com/advisories/legcord-1.1.0-through-1.3.0-path-traversal-via-theme-ipc-handlers

Credits

Siyang Wu