Classroomio vulnerabilities
We track 2 vulnerabilities in Classroomio products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest Classroomio vulnerabilities
- 7.1 High severity
ClassroomIO: Incorrect Authorization
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change ti
- 9.1 Critical severity
Classroomio: Missing Authorization
An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.