CVE-2026-0776

CVE-2026-0776 describes an uncontrolled search path element vulnerability in the Discord Client's discord_rpc module, allowing local privilege escalation. This flaw enables an attacker with low-privileged code execution to load a malicious file from an unsecured location, leading to arbitrary code execution in the context of the target user. Rated 7.3 HIGH on CVSS, the attack requires local access and user interaction, but has high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.