Client-Side Authorization Flaw in Lightspeed Classroom by Lightspeed Systems
CVE-2026-30368
Currently unrated
Key Information:
- Vendor
Lightspeed Systems
- Status
- Vendor
- CVE Published:
- 24 April 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-30368?
A significant client-side authorization flaw in Lightspeed Classroom version 5.1.2.1763770643 allows unauthenticated attackers to exploit weaknesses in integrity checks. By abusing client-generated authorization tokens, these attackers can impersonate legitimate users, resulting in unauthorized control and monitoring of student devices. This vulnerability poses serious risks to the security and privacy of student interactions within the application.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.