CVE-2026-102583
LOW
CVSS 2.7
Published: 2026-09-30
Modified: 2026-10-01
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.
Quick Facts
| CVE ID | CVE-2026-102583 |
| CVSS Score | 2.7 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
| Published | 2026-09-30 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |
Affected Products
-
moodle / moodle
-
moodle / moodle
-
moodle / moodle
-
moodle / moodle