Home

Description

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students (by email) in batches. This vulnerability is fixed in 2.44.0.

PUBLISHED Reserved 2026-02-09 | Published 2026-02-11 | Updated 2026-02-12 | Assigner GitHub_M




LOW: 1.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Problem types

CWE-863: Incorrect Authorization

Product status

< 2.44.0
affected

References

github.com/...pe/lms/security/advisories/GHSA-3gw9-gwjm-vcq5

github.com/frappe/lms/releases/tag/v2.44.0

cve.org (CVE-2026-26031)

nvd.nist.gov (CVE-2026-26031)

Download JSON