CVE-2026-119553

A flaw was found in Moodle. An authenticated user with question import or lesson editing permissions can access sensitive server files, resulting in unauthorized information disclosure. By uploading a specially crafted archive file containing path traversal sequences in image source paths during ...