CVE-2026-26977
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Summary
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Original description
The description as published by the source.
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov