Moodle: Non-searchable tags can still be discovered on the tag search page and in the tags block (CVE-2025-26527)
A vulnerability in Moodle allows tags that are not intended to be visible to users to still be discovered through the tag search page or the tags block. This issue affects multiple Moodle versions prior to specific patched releases. The vulnerability has been assigned CVE-2025-26527 and is rated medium severity. A patch is available to address this issue.
AI Analysis
Technical Summary
Moodle versions 4.1.0 through before 4.1.16, 4.3.0 through before 4.3.10, 4.4.0 through before 4.4.6, and 4.5.0 through before 4.5.2 contain a vulnerability where tags that are not meant to be visible to users can still be discovered via the tag search page or the tags block. This could lead to unintended information disclosure about tags within the system. The issue has been fixed in subsequent releases, and a patch is available as referenced in the Moodle git repository under commit MDL-83941.
Potential Impact
Users may be able to discover tags that were intended to be hidden from them, potentially exposing information that should remain private or restricted. There is no indication of active exploitation in the wild. The impact is limited to information disclosure of non-searchable tags.
Mitigation Recommendations
Apply the official patch provided by Moodle as referenced in the commit MDL-83941. Upgrading affected Moodle versions to 4.1.16 or later, 4.3.10 or later, 4.4.6 or later, or 4.5.2 or later will remediate this vulnerability.
Moodle: Non-searchable tags can still be discovered on the tag search page and in the tags block (CVE-2025-26527)
Description
A vulnerability in Moodle allows tags that are not intended to be visible to users to still be discovered through the tag search page or the tags block. This issue affects multiple Moodle versions prior to specific patched releases. The vulnerability has been assigned CVE-2025-26527 and is rated medium severity. A patch is available to address this issue.
Affected software
pkg:bitnami/moodleRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Moodle versions 4.1.0 through before 4.1.16, 4.3.0 through before 4.3.10, 4.4.0 through before 4.4.6, and 4.5.0 through before 4.5.2 contain a vulnerability where tags that are not meant to be visible to users can still be discovered via the tag search page or the tags block. This could lead to unintended information disclosure about tags within the system. The issue has been fixed in subsequent releases, and a patch is available as referenced in the Moodle git repository under commit MDL-83941.
Potential Impact
Users may be able to discover tags that were intended to be hidden from them, potentially exposing information that should remain private or restricted. There is no indication of active exploitation in the wild. The impact is limited to information disclosure of non-searchable tags.
Mitigation Recommendations
Apply the official patch provided by Moodle as referenced in the commit MDL-83941. Upgrading affected Moodle versions to 4.1.16 or later, 4.3.10 or later, 4.4.6 or later, or 4.5.2 or later will remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-moodle-2025-26527
- Osv Schema Version
- 1.6.2
- Aliases
- ["CVE-2025-26527"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
Patch Information
Threat ID: 6aa00612acd9273b49ab73b5
Added to database: 09/08/2026, 12:56:50 UTC
Last enriched: 09/08/2026, 13:41:55 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.