Bug chaining unlocks pre‑auth RCE on Discuz! X5.0
A researcher demonstrates how three modest flaws—a token‑reuse race condition, an LFI in the admin plugin, and AI‑aided CAPTCHA bypass—can be combined into a pre‑authentication RCE chain against Discuz! X5.0. The work shows that even popular Chinese forum software is vulnerable when small bugs are stitched together.