Is CVE-2026-113595 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-113595?

CVE-2026-113595 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-113595

Description

Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE_SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.