CVE-2026-41900

10.0 Critique

Publiée le 08/05/2026 à 06:16 · Modifiée le 17/06/2026 à 12:47 · Analysée par le NVD · Source : security-advisories@github.com

Description

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.

Traduire en français

Produits concernés

th30d4y OpenLearnX

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	10.0 Critique	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78
CWE-94
CWE-250
CWE-284
CWE-693

Références

https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e Patch
https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix Release Notes
https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories