Vulnerability Description
Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpoint with filter_criterion parameters to retrieve usernames holding specific roles, banned flags, and managed topic identifiers without authorization.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/oppia/oppia
- https://github.com/oppia/oppia/blob/v3.5.2/core/controllers/admin.py
- https://github.com/oppia/oppia/issues/26652
- https://www.vulncheck.com/advisories/oppia-through-3.5.2-missing-authorization-o
- https://github.com/oppia/oppia/issues/26652
FAQ
What is CVE-2026-85210?
CVE-2026-85210 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpo...
How severe is CVE-2026-85210?
CVE-2026-85210 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-85210?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.