CVE-2026-41900

Summary

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.

Affected Software

VendorProductVersion RangeStatus
th30d4yOpenLearnX< 2.0.3affected

Weaknesses

  • CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  • CWE-94: CWE-94: Improper Control of Generation of Code ('Code Injection')
  • CWE-250: CWE-250: Execution with Unnecessary Privileges
  • CWE-284: CWE-284: Improper Access Control
  • CWE-693: CWE-693: Protection Mechanism Failure

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References