LOW 2.7 NVD
CVE-2026-102583
A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenti
A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88587
- https://access.redhat.com/security/cve/CVE-2026-102583
- https://bugzilla.redhat.com/show_bug.cgi?id=2543640
- https://moodle.org/mod/forum/discuss.php?d=482501
This low severity vulnerability with a CVSS score of 2.7 was published on 2026-09-30 via NVD.
vulnfeed aggregates 9449 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.