A critical privilege escalation vulnerability in ClassroomIO allows remote, unauthenticated attackers to gain unauthorized elevated access to the application.

This vulnerability involves a flaw in the application's authentication or session handling logic, specifically affecting the /api/verify and /rest/v1/profile endpoints. It allows an unauthenticated remote attacker to escalate privileges within the system.

The ability for an unauthenticated user to escalate privileges poses a severe risk to the confidentiality, integrity, and availability of the ClassroomIO platform. With a CVSS score of 8.1, this vulnerability could allow attackers to bypass access controls, potentially leading to unauthorized data access, administrative command execution, or total system compromise.

Immediate Action: Update the ClassroomIO installation to version 0.2.6 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Review application logs for unauthorized requests or suspicious activity targeting the /api/verify and /rest/v1/profile endpoints.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to filter or block suspicious traffic directed at the identified vulnerable API endpoints.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the provided GitHub gist reference.

Given the high CVSS severity and the existence of a public proof-of-concept, organizations running ClassroomIO must prioritize this update. Ensure that the patch is applied to all production instances immediately to prevent unauthorized privilege escalation and potential system takeover.