The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.