CVE-2025-65669: Classroomio

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.

Affected products

• Classroomio Classroomio: version 0.1.13 only

Published 2025-11-26. Last modified 2026-07-05.