Critical severity · published Dec 16, 2025
CVE-2025-68270
CourseLimitedStaff Role Allows Studio Access
9.9
CVSS
0.3%
EPSS
No
On KEV
Description
The Open edX Platform is a learning management platform. Prior to commit 05d0d0936daf82c476617257aa6c35f0cd4ca060, CourseLimitedStaffRole users are able to access and edit courses in studio if they are granted the role on an org rather than on a course, and CourseLimitedStaffRole users are able to list courses they have the role on in studio even though they are not meant to have any access on the studio side for the course. Commit 05d0d0936daf82c476617257aa6c35f0cd4ca060 fixes the issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
edx-platform · openedx
< 05d0d0936daf82c476617257aa6c35f0cd4ca060 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-68270
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-68270
github.com
https://github.com/openedx/edx-platform/commit/05d0d0936daf82c476617257aa6c35f0cd4ca060
github.com
https://github.com/openedx/edx-platform/pull/37772
github.com
https://github.com/openedx/edx-platform/pull/37773
github.com
https://github.com/openedx/edx-platform/security/advisories/GHSA-rh64-vc2h-7wfj
More from edx-platform
8.8
CVE-2024-22209
XBlock custom auth does not respect JWT Scopes
5.3
CVE-2025-47942
Learners on edX Platform can download python_lib.zip
5.3
CVE-2024-41806
Open edX Platform's instructor upload CSV for cohort creation not Private by Default