CVE-2026-42163

UNKNOWN View on NVD ↗

Description

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.

References

https://mahara.org/interaction/forum/topic.php?id=10077

Published: Aug 17, 2026 22:17 UTC Modified: Aug 17, 2026 22:17 UTC