CVE-2025-62376: pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cf

pwn.college DOJO, an education platform for learning cybersecurity, had a vulnerability in its /workspace endpoint that allowed attackers to access other users' Windows virtual machines (VMs, which are simulated computers) without permission. The flaw occurred because the system retrieved user information from a URL parameter without checking if the requester had admin privileges, and it didn't verify passwords before granting access to a user's desktop, potentially allowing attackers to view and modify files on both Windows and Linux systems.