Unauthorized Course Deletion in ClassroomIO by ClassroomIO
CVE-2025-65669

Currently unrated

Key Information:

Vendor: ClassroomIO
Status: ClassroomIO
Vendor: CVE Published:; 26 November 2025

🔔 Create ClassroomIO Vulnerability Alert

What is CVE-2025-65669?

A vulnerability has been identified in ClassroomIO version 0.1.13 that allows student accounts to delete courses without proper authorization. This issue arises from a lack of authentication checks on the Explore page, enabling unauthorized users to bypass restrictions that are intended for administrative access only. This security flaw poses significant risks as it undermines the integrity and structure of course management within the platform.

References

http://classroomio.com

https://github.com/classroomio/classroomio

https://github.com/Rivek619/CVE-2025-65669

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 26, 2025
Vulnerability Reserved
Nov 18, 2025

JSON