High severity8.8NVD Advisory· Published Apr 8, 2024· Updated Jun 17, 2026

CVE-2024-31442

Description

Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, including admin commands. This allows users to receive products for free and delete/create/update products/tags/etc. The only non-affected command is /products admin clear as this was already programmed for bot owners only. All users should upgrade to version 1.0.2 to receive a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redon Hub/Redon Hubllm-fuzzy
Range: <1.0.2
Redon-Tech/Redon-Hubv5
Range: < 1.0.2

Patches

Vulnerability mechanics

References

github.com/Redon-Tech/Redon-Hub/commit/38cb7c08d4d890e8a1badadbd46f459f06e3cdcdnvdPatch
github.com/Redon-Tech/Redon-Hub/security/advisories/GHSA-3rx8-6453-7q26nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000