Moodle Permission Issues Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. A vulnerability exists in Moodle for privilege issues. The vulnerability stems from insufficient permission checking that allo...

GHSA-G88W-V4CQ-QGCP Moodle has an IDOR in badges allows disabling of arbitrary badges

Insufficient capability checks made it possible to disable badges a user does not have permission to access...

Moodle has an IDOR in badges allows disabling of arbitrary badges

Insufficient capability checks made it possible to disable badges a user does not have permission to access...

CVE-2025-26531

CVE-2025-26531 is an IDOR-type vulnerability in Moodle’s badges system caused by insufficient capability checks, which can let an attacker disable badges that they should not have access to. The connected sources (OSV, GHSA, CNVD, plus related advisories) consistently describe this as an authoriz...

CVE-2025-26531 IDOR in badges allows disabling of arbitrary badges

Insufficient capability checks made it possible to disable badges a user does not have permission to access...