PT-2025-29868 · Voidbot · Voidbot

Death1Clown · Published 2025-07-16 · Updated 2025-07-16 · CVE-2025-53943

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions VoidBot Open-Source versions 0.0.1 through 0.8.1

Description VoidBot Open-Source is a customizable Discord bot. A flaw exists in the command handler where permission checks are not properly enforced for certain administrative commands. This allows users without the required roles or privileges to execute sensitive commands, potentially disrupting server operations.

Recommendations Update to version 1.0.0 to resolve this issue.

Fix

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-53943

GHSA-6RR8-9C8Q-M5RV

Affected Products

Voidbot

References · 9

• https://osv.dev/vulnerability/CVE-2025-53943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53943 · Security Note
• https://github.com/Death1Clown/VoidBot_open-source/security/advisories/GHSA-6rr8-9c8q-m5rv · Note
• https://twitter.com/CveFindCom/status/1945547235103531023 · Twitter Post
• https://twitter.com/CveFindCom/status/1945547232813408353 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1945579066964189503 · Twitter Post
• https://t.me/cvetracker/27984 · Telegram Post
• https://discordjs.guide/popular-topics/permissions.html · Note
• https://twitter.com/CVEnew/status/1945562944730800350 · Twitter Post