CVE-2026-105293

EUVD-2026-92157
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall, and themes.install to launch local executables, recursively delete directories, and write files outside the themes directory.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.13%
Common Weakness Enumeration
References
https://github.com/Legcord/Legcord
https://github.com/Legcord/Legcord/blob/v1.3.0/src/common/themes.ts#L269-L276
https://github.com/Legcord/Legcord/blob/v1.3.0/src/discord/ipc.ts#L201-L206
https://github.com/Legcord/Legcord/issues/1163
https://www.vulncheck.com/advisories/legcord-1.1.0-through-1.3.0-path-traversal-via-theme-ipc-handlers