Discord Client is vulnerable to a local privilege escalation flaw that allows an attacker with low-privileged access to execute arbitrary code in the context of a target user.

The application utilizes an uncontrolled search path within the discord_rpc module, allowing it to load files from insecure locations. An authenticated local user with limited privileges can exploit this to achieve code execution with the permissions of the targeted user account.

This vulnerability poses a significant risk to organizational endpoints by enabling lateral movement or full system compromise once an attacker establishes an initial foothold. With a CVSS score of 7.3, this flaw is classified as High severity, as it facilitates privilege escalation that could lead to the theft of sensitive session tokens, credentials, or the installation of persistent malware on employee workstations.

Immediate Action: Update the Discord Client to the latest version provided by the vendor to ensure the insecure search path is remediated.

Proactive Monitoring: Monitor endpoint security logs for unauthorized file loading attempts or suspicious child processes spawned by the Discord client application.

Compensating Controls: Enforce strict file system permissions on the host operating system to prevent unauthorized users from placing malicious files in locations where the application may look for resources.

Public Exploit Available: Yes, public proof-of-concept repositories exist on GitHub.

Given the capability for local privilege escalation and the availability of public proof-of-concept code, this vulnerability should be prioritized for remediation. Administrators should ensure that all Discord Client installations are updated immediately to prevent local attackers from elevating their privileges to compromise user sessions or system integrity.