CVE-2026-97702 | openedx Open edX Platform up to release/ulmo.3/release/verawood.0 Course Team Management manage_course_team email/username/user_id improper authorization

A vulnerability categorized as problematic has been discovered in openedx Open edX Platform up to release/ulmo.3/release/verawood.0. This issue affects some unknown processing of the file /api/support/v1/manage_course_team of the component Course Team Management. The manipulation of the argument email/username/user_id results in improper authorization.

This vulnerability is reported as CVE-2026-97702. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More