A flaw in the NatroMacro AutoHotkey script allowed any user who could send a message in a Discord channel configured for Remote Control to execute arbitrary commands on the target machine. The vulnerability exposed full keyboard, mouse, and file system operations, giving attackers complete control over the victim’s computer, including data theft, deletion, or modification of files and launching of other processes.

All installations of NatroMacro released before version 1.1.0 that use the Discord Remote Control feature in a non‑private channel are affected. The product is distributed by NatroTeam.

The CVSS score of 6.4 reflects moderate severity, while an EPSS score of less than 1 % indicates a very low but non‑zero likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Attackers only need the ability to send messages in the targeted Discord channel, which most server administrators inadvertently grant to many users. Because the exploit grants full system control, the potential damage is high even though the probability of exploitation remains low.