CVE-2026-54682 Tyrrrz CVE debrief

Who should care

Users of DiscordChatExporter, particularly those who export chat logs with markdown formatting disabled, should be aware of this vulnerability and take steps to mitigate it by updating to version 2.47.2 or later. Affected operators, platforms, and security teams should review compensating controls for exposed systems while remediation is scheduled and verified.

Technical summary

The DiscordChatExporter tool, prior to version 2.47.2, had a vulnerability where HTML exports generated with markdown formatting disabled would pass attacker-controlled content through FormatMarkdownAsync and FormatEmbedMarkdownAsync, rendering it without HTML entity encoding. This allowed for the execution of script payloads stored in certain fields, such as message content, embed titles, and field names, when a user exports a channel and opens the resulting HTML. Users of DiscordChatExporter should prioritize updating to version 2.47.2 or later to mitigate this vulnerability.

Defensive priority

Users of DiscordChatExporter should prioritize updating to version 2.47.2 or later to mitigate this vulnerability.

Recommended defensive actions

• Update DiscordChatExporter to version 2.47.2 or later
• Review and verify chat log exports for potential script payloads
• Implement compensating controls to monitor and restrict user exports
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record indicates that DiscordChatExporter saves Discord chat logs to a file and, prior to version 2.47.2, had a vulnerability allowing for the execution of attacker-controlled scripts when exporting chat logs with markdown formatting disabled. Users should verify chat log exports for potential script payloads and review compensating controls to monitor and restrict user exports. Evidence limits suggest that further review of chat logs and user exports is necessary to ensure the vulnerability is fully mitigated.

Official resources