A vulnerability, which was classified as problematic, was found in Frappe LMS up to 2.44.0. This issue affects some unknown processing of the component API Endpoint. The manipulation results in missing authorization.
This vulnerability is identified as CVE-2026-26977. The attack can be executed remotely. There is not any exploit available.