An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.