CVE-2025-67298 - Vulnerability Analysis

Overview

ClasroomIO < 0.2.6 contains a privilege escalation vulnerability caused by improper access control in /api/verify and /rest/v1/profile endpoints, letting remote attackers escalate privileges, exploit requires network access.

Severity & Score

Impact

Remote attackers can escalate their privileges, potentially gaining unauthorized access or control.

Mitigation

Update to version 0.2.6 or later.

References

• https://gist.github.com/prashunbaral/70c4f6f9d9ff8b82295623073eb41f3a
• https://github.com/classroomio/classroomio/releases/tag/v0.2.6

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🟠 CVE-2025-67298 - High (8.1) An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67298/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner