CVE-2025-47555

CVE-2025-47555 describes an Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS, specifically affecting versions up to and including 3.9.4. This flaw allows for the exploitation of incorrectly configured access control security levels. With a CVSS score of 8.1 (High), the vulnerability can be exploited remotely with low attack complexity and requires low privileges, potentially leading to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. Despite the lack of exploit code, the CVE has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.