CVE-2026-0776

HIGH

Discord Client - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-0776. PoCs published by 0x18F.

AI-analyzed exploit summary This repository contains a functional PoC for CVE-2026-0776, demonstrating an uncontrolled search path element vulnerability in Discord's Node.js module resolution. The exploit deploys a malicious 'utf-8-validate.js' module to a predictable path, which Discord loads and executes when launched.

Description

Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the discord_rpc module. The product loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-27057.

Exploits (1)

github WORKING POC 2 stars
by 0x18F · pythonpoc
https://github.com/0x18F/CVE-2026-0776

This repository contains a functional PoC for CVE-2026-0776, demonstrating an uncontrolled search path element vulnerability in Discord's Node.js module resolution. The exploit deploys a malicious 'utf-8-validate.js' module to a predictable path, which Discord loads and executes when launched.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Discord Desktop Client 1.0.9196
No auth needed
Prerequisites: Local file system access · Ability to write to C:\node_modules · Discord installed and running on Windows
devstral-2 · analyzed Jun 10, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory x_research-advisory
https://www.zerodayinitiative.com/advisories/ZDI-26-040/

Scores

CVSS v3 7.3
EPSS 0.0036
EPSS Percentile 27.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-427
Status published
Published Jan 23, 2026
Tracked Since Feb 18, 2026