CVE-2025-59826 — FlagForgeCTF Vulnerable to Unauthorized Problem Creation

CVE-2025-59826

FlagForgeCTF Vulnerable to Unauthorized Problem Creation PUBLISHED

Description (CNA)

Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0.

Affected (CNA)

Vendor / product	Versions
FlagForgeCTF / flagForge	affected = 2.1.0

CWE

CWE-862

References

https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-q7pg-qchv-3pc5

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.