CVE Explorer

CVE-2026-25885

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss://polarlearn.nl/api/v1/ws can be used without logging in. An unauthenticated client can subscribe to any group chat by providing a group UUID, and can also send messages to any group. The server accepts the message and stores it in the group’s chatContent, so this is not just a visual spam issue.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:eb854c48ce88b7ee097e664ec605d594888f9e715d57e5a1bdf7ad22bb48f962

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-285","description":"CWE-285: Improper Authorization","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-306","description":"CWE-306: Missing Authentication for Critical Function","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/problemTypes/1/descriptions/0

Affected products and versions

1 source assertion

{"product":"PolarLearn","vendor":"polarnl","versions":[{"status":"affected","version":"< 0-PRERELEASE-16"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

2 source assertions

{"cweId":"CWE-285","description":"CWE-285: Improper Authorization","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-306","description":"CWE-306: Missing Authentication for Critical Function","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/problemTypes/1/descriptions/0

Source references

2 source assertions

{"name":"https://github.com/polarnl/PolarLearn/commit/3ba588fda0d3f8e238483a20772719f27e52e79f","tags":["x_refsource_MISC"],"url":"https://github.com/polarnl/PolarLearn/commit/3ba588fda0d3f8e238483a20772719f27e52e79f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/references/1

{"name":"https://github.com/polarnl/PolarLearn/security/advisories/GHSA-gvjm-5pw7-6c8c","tags":["x_refsource_CONFIRM"],"url":"https://github.com/polarnl/PolarLearn/security/advisories/GHSA-gvjm-5pw7-6c8c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1d2a4b6d955585492afd5e1b42c62285bed48c73e79306334b6d6890d4c43a1b · sha256:821124747041bf82… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer