Natro Macro: Malicious actions allowed through Discord RC Commands by any user

published 2026-03-06 8 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-10007

cvss: 6.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 16%
public exploits: 0; none known

Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said channel access to do anything on their computer. This includes keyboard and mouse inputs and full file access. This issue has been patched in version 1.1.0.

Patch / fix

fixed in 1

natroteam natro_macro 1.1.0

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 8 mo ago (2026-03-06)

Exploit prediction

0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
NVD	3.1	8.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

NatroTeam NatroMacro

Classification

Weakness

CWE-22 Improper Limitation of a Pathname to a Restricted Directory
CWE-287 Improper Authentication
CWE-434 Unrestricted Upload of File with Dangerous Type

References

github.com /NatroTeam/NatroMacro/security/advisories/GHSA-ph9r-2qjm-ghvg
mitigation, vendor-advisory

Sources

CVE List CVE-2026-28800
NVD CVE-2026-28800

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary