Permission Check Flaws in Feedback Activities of Moodle by Moodle

CVE-2025-26526

What is CVE-2025-26526?

The vulnerability affects Moodle's Feedback activities, where inadequate permission checks may allow unauthorized users to view or delete responses, leading to potential data integrity issues. The flaw arises from a failure to enforce Separate Groups mode restrictions, compromising the intended access controls. This could be exploited by malicious users to gain access to sensitive feedback data without authorization.

References