Unauthorized Course Deletion in ClassroomIO by ClassroomIO
CVE-2025-65669

9.1CRITICAL

Key Information:

Vendor

ClassroomIO

Status
ClassroomIO
Vendor
CVE Published:
26 November 2025

What is CVE-2025-65669?

A vulnerability has been identified in ClassroomIO version 0.1.13 that allows student accounts to delete courses without proper authorization. This issue arises from a lack of authentication checks on the Explore page, enabling unauthorized users to bypass restrictions that are intended for administrative access only. This security flaw poses significant risks as it undermines the integrity and structure of course management within the platform.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://classroomio.com
https://github.com/classroomio/classroomio
https://github.com/Rivek619/CVE-2025-65669

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.