The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
MediumVulnerability
CVE-2026-120199: LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-120199
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
LearnHouse before 1.1.1 contains a missing authorization flaw in its assignment API, tracked as CVE-2026-120199. Authenticated users can supply another user_id to the submissions grade endpoint or query submission read functions, exposing other students' work, grades and instructor feedback.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.