CVE-2026-97702

Open edX Platform enables the authoring and delivery of online learning at any scale. From the Ulmo release until release/ulmo.4 and release/verawood.1, the GET /api/support/v1/managecourseteam/ endpoint in CourseTeamManageAPIView requires only IsAuthenticated and omits the global support-role...