CVE-2026-30368: Lightspeed Classroom

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices.

Affected products

• Lightspeed Lightspeed Classroom: version 5.1.2.1763770643 only

Published 2026-04-24. Last modified 2026-09-08.