CVE-2026-47189: Quest Bot: AutoMod removal can delete rules from another guild by global rule ID

Synopsis

This is an insecure direct object reference (IDOR) vulnerability in Quest Bot, an open-source Discord moderation bot. The AutoMod rule removal flow accepts a global database rule ID and deletes the matching rule without checking whether that rule belongs to the guild (Discord server) where the command was issued. An attacker with Manage Server permission in any guild can learn a target guild's AutoMod rule IDs through the bot's autocomplete feature, then delete those rules from the victim guild. No patched version is currently published upstream; HarborGuard is tracking the advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the bot's command interface over the network via Discord's API; no local or physical access is needed.

• AuthenticationNot required

  No authentication beyond holding a standard Discord account with Manage Server permission in any guild is required; no privileged or admin-level bot credentials are needed.

• Victim interactionNot required

  No action by a victim user or administrator is needed; the attacker issues the removal command unilaterally.

• Attack complexityDetail

  The exploit is straightforward under typical conditions, though the attacker-specific prerequisite (AT:P) means the attacker must first discover a target guild's rule ID, which the bot's autocomplete feature exposes directly.

Blast Radius

• Deletes AutoMod rules from a victim Discord guild without the guild administrators' knowledge or consent.
• Removes moderation protections (keyword filters, spam rules, mention limits) configured by the victim guild, leaving the server exposed to content the rules were blocking.
• The attacker's own guild and bot credentials are not exposed; impact is limited to integrity and availability of the victim guild's AutoMod configuration.
• Repeated or targeted deletion across multiple guilds is feasible as long as the attacker holds Manage Server in at least one guild and can retrieve rule IDs via autocomplete.