CVE-2026-63239

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allows attackers to gain unauthorized access to shared multi-tenant S3 buckets and SQS queues, potentially exposing sensitive data and enabling malicious activities such as content injection, job manipulation, or email interception. Organizations using Koollab LMS should prioritize remediation efforts to mitigate the risk of data breaches and protect user information.