Vulnerability · Published Mar 6, 2026 · Assigned by GitHub_M

CVE-2026-28800Natro Macro: Malicious actions allowed through Discord RC Commands by any user

Medium 6.4

In plain English

A medium-severity path traversal in NatroMacro from NatroTeam. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.2%top 83.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said channel access to do anything on their computer. This includes keyboard and mouse inputs and full file access. This issue has been patched in version 1.1.0.

Affected products (as reported)

Vendor	Product	Versions
NatroTeam	NatroMacro	< 1.1.0

Weakness: CWE-22, CWE-287, CWE-434 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

References

https://github.com/NatroTeam/NatroMacro/security/advisories/GHSA-ph9r-2qjm-ghvg x_refsource_CONFIRM