CVE-2025-53943CWE-863

VoidBot Open-Source Has Improper Permission Check That Allows Unauthorized Command Execution

High · published July 16, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

VoidBot Open-Source is a customizable Discord bot. VoidBot Open-Source versions 0.0.1 through 0.8.1 contain a vulnerability in the command handler where permission checks are not properly enforced for certain administrative commands. This allows users without the required roles or privileges to execute sensitive commands such as `ban`, `kick`, or `shutdown`, potentially disrupting server operations. Version 1.0.0 fixes the issue.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-07-16T16:07Z
EPSS history
Timeline
  • 16 JUL 16:07Z
    VoidBot Open-Source Has Improper Permission Check That Allows Unauthorized Command Execution
    cvelistv5