CVE-2026-26977 — Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the de…
Published: 2026-02-20 · CVSS: 6.9 · CVSS 4.0
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7