Privilege escalation in Defender

Description

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the same server. If a bot owner shares the same server as the attacker, it is possible for the attacker to issue bot-owner restricted commands. The issue has been patched in version 1.10.0. One may unload the Defender cog as a workaround.

Scores

EPSS (exploitation in 30 days)

1.1% · top 33% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

• CWE-269: Improper Privilege Management (opens in a new tab)All about CWE-269 and its CVEs

Affected products

• Twentysix26 · x26-Cogs

  • affected < 1.10.0

References (3)

• https://github.com/Twentysix26/x26-Cogs/security/advisories/GHSA-cfh8-v56j-5757 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://github.com/Twentysix26/x26-Cogs/commit/72dd9323cb4c90f3a5accac7087605375d178246 (opens in a new tab)x_refsource_MISCx_transferred
• https://github.com/Twentysix26/x26-Cogs/releases/tag/v1.10 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-23604](https://trackcve.app/badge/CVE-2022-23604.svg)](https://trackcve.app/cve/CVE-2022-23604)

Record last updated 23 Apr 2025, 19:05 UTC.