CVE-2026-39385

Vulnerability Description

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course.

Related Weaknesses (CWE)

CWE-288

References

https://github.com/frappe/lms/security/advisories/GHSA-c4xh-2rcm-6mgc

FAQ

What is CVE-2026-39385?

CVE-2026-39385 is a documented vulnerability. Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 wit...

How severe is CVE-2026-39385?

CVSS scoring is not yet available for CVE-2026-39385. Check NVD for updates.

Is there a patch for CVE-2026-39385?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.