CVE-2026-102583
Moodle: incorrect capability check in ai generate image web service
- Published
- Sep 30, 2026
- Updated
- Sep 30, 2026
- Assigning CNA
- fedora
- Evidence observed
- Sep 30, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:NSummary
A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.
Sources
A community-curated, verified collection of Proof-of-Concept exploits for CVEs disclosed in 2026.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.