HTTP Desync Flaw Exposed Discord Users' Private Attachments in Real-Time

This HTTP desynchronization vulnerability in Discord's media proxy leveraged connection pooling and HTTP request smuggling to intercept any user attachment—including those in encrypted DMs—without detection. The flaw's platform-wide scope meant attackers could passively monitor and access millions of users' private media in real-time, representing a critical privacy breach that scaled with minimal technical effort.