Permission Check Flaws in Feedback Activities of Moodle by Moodle

CVE-2025-26526

Summary

The vulnerability affects Moodle's Feedback activities, where inadequate permission checks may allow unauthorized users to view or delete responses, leading to potential data integrity issues. The flaw arises from a failure to enforce Separate Groups mode restrictions, compromising the intended access controls. This could be exploited by malicious users to gain access to sensitive feedback data without authorization.

References