Discord desktop RCE disclosed, but the $5k bounty draws security community backlash
rez0__ · x · 2026-10-18
A remote code execution (RCE) vulnerability in Discord's desktop client was disclosed, with Discord paying only a $5,000 bounty. Ian Carroll commented that if Discord pays just $5k for a desktop RCE, "it's probably time to uninstall it," sparking criticism of the company's bug bounty pricing and security posture.
More from Safety
- OpenCode hacked: API keys stolen, users told to revoke; gateway egress control as defense — pjausovec · 2026-10-18
- OpenAI accused of training on stolen papers, sparking copyright and open-knowledge debate — felpix_ · 2026-10-18
- Browser MCP Defense rule blocks external Codex agent tool calls before execution — HankYeomans · 2026-10-18
- OpenAI engineer in bugging case says one-way Saudi ticket predates probe — rohanpaul_ai · 2026-10-18
- Support bot promised free repairs: a RAG hallucination postmortem — CommonMinimum587 · 2026-10-18
- Kelsey Tuoc: AI transparency via independent audits and whistleblower protection is essential — S_OhEigeartaigh · 2026-10-18