CVE-2025-65669

9.1 criticalEPSS 0.5%

Critical (9.1) in classroomio classroomio. EPSS 0.5% chance of exploitation in the next 30 days.

An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-11-26
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

classroomio:classroomio

References

https://github.com/Rivek619/CVE-2025-65669
https://github.com/classroomio/classroomio
https://github.com/Rivek619/CVE-2025-65669

Check your stack JSON