A vulnerability described as critical has been identified in BigBlueButton up to 3.0.21. Affected by this issue is some unknown functionality of the file /var/bigbluebutton. Such manipulation leads to exposure of resource.
This vulnerability is uniquely identified as CVE-2026-27466. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
