Advisories · Technology

learnhouse.

Every CVE that names learnhouse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120199 CVE record

CVSS 5.3 Medium

LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API
- learnhouse
- Broken access control
Not analysed yet 31 Oct 2026
CVE-2026-109564 CVE record

CVSS 2.3 Low

LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate Endpoint
- LearnHouse
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2025-12276 CVE record

CVSS 5.3 Medium

LearnHouse Image information disclosure
- LearnHouse
- Information disclosure
- Broken access control
Not analysed yet 27 Oct 2025
CVE-2025-12270 CVE record

CVSS 5.3 Medium

LearnHouse Student Assignment Submission sub_file resource injection
- LearnHouse
- CWE-99
Not analysed yet 27 Oct 2025
CVE-2025-12269 CVE record

CVSS 5.1 Medium

LearnHouse Account Setting previews cross site scripting
- LearnHouse
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 27 Oct 2025
CVE-2025-12268 CVE record

CVSS 5.3 Medium

LearnHouse Course Thumbnail courses unrestricted upload
- LearnHouse
- Broken access control
- Unrestricted file upload
Not analysed yet 27 Oct 2025