Authorization Bypass Vulnerability in Themeum Tutor LMS

CVE-2025-32223

What is CVE-2025-32223?

The Themeum Tutor LMS is susceptible to an authorization bypass vulnerability, which arises from user-controlled security configurations. This flaw allows malicious actors to exploit incorrectly set access controls, potentially granting them unauthorized access to restricted areas of the LMS. It is critical for users to review their configurations and apply the necessary security measures to mitigate this risk.

References