Discord libdave vulnerabilities

Latest Discord libdave CVEs

Newest publication first

1. CVE-2026-104480 Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

   Published 2026-10-02

   Critical·CVSS 9.4 EPSS 0.40%

   Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or withhold signaling mess...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.