Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109564— LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate Endpoint

Quick assessment

Affected
learnhouse LearnHouse
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LearnHouse 版本低于 1.4.0 存在一个缺少授权检查的安全漏洞，位于 POST /api/v1/playgrounds/{uuid}/duplicate 接口中。该漏洞绕过了 所强制执行的读取访问控制和草稿状态检查。拥有创建 Playground 权限的已认证用户（如教师），如果知道某个受限或尚未公开的 Playground 的 UUID，即可复制其 并将其重新公开发布。

CVSS 3.1 · Low EPSS 0.19% · P8

Possible ATT&CK Techniques 1 AI

T1530 · Data from Cloud Storage

Affected Version Matrix 2

VendorProduct Version RangeStatus
learnhouse LearnHouse < 1.4.0 affected
1.4.0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109564

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by get_playground. Authenticated users with playground creation rights, such as Instructors, who know a RESTRICTED or unpublished playground UUID can copy its html_content and republish it publicly.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
learnhouse LearnHouse 0 ~ 1.4.0 -

II. Public POCs for CVE-2026-109564

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109564

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-109564 (1)

Vendor Advisories for CVE-2026-109564 (1)

IV. Related Vulnerabilities

Same product: LearnHouse
Same weakness: CWE-862

V. Comments for CVE-2026-109564

No comments yet

Leave a comment