Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to privilege escalation or unauthorized access to certain features.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-03 | 2 | Disclosure2 |
| 2026-02-12 | 1 | Patch1 |
CVE-2025-67856 A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted wi… https://www.cve.org/CVERecord?id=CVE-2025-67856
Post summary
A newly identified authorization flaw in Moodle’s badge awarding process allows unauthorized badge granting due to incomplete role checks; no patches, PoC, or exploitation evidence are provided.
A privilege escalation flaw (CVE-2025-67856) affects Moodle due to incomplete role checks in badge awarding. Update to version 5.1.1. #Moodle #InfoSec #Vulnerability https://www.pulsepatch.io/posts/cve-2025-67856-moodle-privilege-escalation
Post summary
The tweet announces a Moodle privilege escalation vulnerability (CVE‑2025‑67856) and recommends updating to 5.1.1, but does not provide exploit details or evidence of active attacks.
CVE-2025-67856 Moodle Badge Awarding Authorization Bypass Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67856
Post summary
The text announces the existence of CVE-2025-67856, a Moodle authorization bypass vulnerability, but provides no additional technical details, exploit information, or patch guidance.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | moodle | moodle | - | - | - |
| App | moodle | moodle | 5.1.0 | - | - |