CVE-2026-63229
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Koollab LMS has a pre-authentication blind SQL injection vulnerability in the SSO OAuth endpoint. An unauthenticated attacker can use a time-based SQL oracle to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens, potentially enabling account takeover.
Risk Assessment
An attacker could access sensitive user data, potentially leading to identity theft, privacy breaches, and unauthorized account access.
Recommendation
Immediately update Koollab LMS to the latest version that fixes this vulnerability, and consider additional security measures such as query parameterization.
Original NVD description (English source)
A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover.