Previous versions of the Kolibri education platform allow callers to include a baseurl query parameter in specific API calls. The server fetches the URL supplied and returns the response body without validating the target, enabling the attacker to force the Kolibri server to request arbitrary URLs. This permits unintended access to internal hosts or external resources and may leak data or create covert channels, but it does not grant code execution or privilege escalation on the device itself.

All Kolibri installations prior to version 0.19.4 are affected. The flaw resides in the RemoteFacilityUser viewsets of the Kolibri API, and the GET endpoint is accessible without authentication. Colleagues should inspect any Kolibri instance running a version older than 0.19.4 and evaluate whether the vulnerable endpoints are exposed.

The CVSS score of 5.8 places this vulnerability in the medium danger range, and the EPSS score is currently unavailable. It is not flagged in CISA's KEV catalog. Attackers can trigger the flaw remotely via an unauthenticated GET request, sending any baseurl and receiving the response content back. Because the endpoint is unauthenticated, the likelihood of exploitation is higher than if it were protected, though the lack of downstream code execution keeps the potential impact moderate.