The vulnerability CVE-2026-63229 affects Koollab LMS version 5.3.2 and involves a blind SQL injection flaw in the SSO OAuth endpoint. An unauthenticated attacker can perform time-based SQL injection queries to read sensitive data from the backend database. Extracted data may include personally identifiable information, user credentials, and valid JWT tokens, which could be leveraged to hijack user accounts. The vulnerability does not require authentication or user interaction and has a CVSS 3.1 score of 9.1, reflecting its critical severity. No official remediation or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows attackers to read sensitive database contents without authentication, compromising confidentiality and integrity. Exposure of personally identifiable information and credentials can lead to privacy violations and unauthorized access. Disclosure of valid JWT tokens may enable attackers to bypass authentication mechanisms and take over user accounts. There is no reported impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SSO OAuth endpoint if possible and monitor for unusual activity related to authentication. Avoid exposing the vulnerable version 5.3.2 in untrusted environments.