A vulnerability in Moodle allows a low-privileged authenticated user to trigger the recalculation of grade penalties without the necessary permissions. This flaw arises from a missing capability check and can lead to unauthorized modification of grade penalty records, potentially affecting student assessment scores. The issue has a medium severity rating with a CVSS score of 4.3.