CVE-2026-26031CWE-863

Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students

Low · published February 11, 2026

CVSS v4.0
1.3
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students (by email) in batches. This vulnerability is fixed in 2.44.0.

The record
Technical detail
CVSS v4.0
1.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS
0.00329 · 24.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-02-11T21:32Z
EPSS history
Timeline
  • 11 FEB 21:32Z
    Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students
    cvelistv5