Authenticated Administrator escalation via unchecked AutoRole configuration

Privilege escalation in Vantern Quest Bot before 1.0.3 allows remote authenticated users to gain Discord server Administrator access. The /autorole add command stores an attacker-selected role after checking ManageGuild but not the caller's authority to assign it; guildMemberAdd later assigns the role to a joining account when the bot can edit it. Exploitation requires Manage Server, a controlled joining account, bot Manage Roles permission, and an Administrator role below the bot's highest role, granting control of server settings, channels, roles, and membership.