CVE-2026-47177
Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a channel they can read. When tickets are closed, the bot exports the full ticket history and sends it to that configured transcript channel. This can expose private ticket messages to users who could not read the original ticket channel. This issue has been patched in version 1.0.4.
| CWE | CWE-200 |
| Vendor | duck-organization |
| Product | quest-bot |
| Published | Jun 11, 2026 |
| Last Updated | Jun 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for duck-organization quest-bot
Be the first to know when new unknown vulnerabilities affecting duck-organization quest-bot are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
duck-organization / quest-bot
< 1.0.4