CVE-2025-65669: Critical severity Classroomio classroomio vulnerability

Published Nov 26, 2025

Updated

An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.

Affected Software

2 affected components

Classroomio classroomio

Classroomio classroomio=0.1.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade classroomio to a version that resolves this vulnerability.
Fixed in 0.1.13

Event History

Nov 26, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-65669?

CVE-2025-65669 is classified as a high severity vulnerability due to the unauthorized ability for student accounts to delete courses.

How do I fix CVE-2025-65669?

To fix CVE-2025-65669, implement proper authorization checks to restrict course deletion to admin accounts only.

Which version of classroomio is affected by CVE-2025-65669?

CVE-2025-65669 affects classroomio version 0.1.13.

What can be exploited due to CVE-2025-65669?

CVE-2025-65669 allows unauthorized deletion of courses by student accounts on the Explore page.

Who is at risk from CVE-2025-65669?

Users of classroomio, especially those with student accounts, are at risk of course deletion issues due to CVE-2025-65669.