CVE-2026-45140
1 advisory.
Packagist/chamilo/chamilo-lms CVE-2026-45140: critical 9.8, EPSS 1.33%
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
Action: Upgrade chamilo/chamilo-lms to 2.0.1 or later.
composer require chamilo/chamilo-lms:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-g4c3-4g96-6g4m
- https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-g4c3-4g96-6g4m
- https://github.com/chamilo/chamilo-lms/commit/4bdba1b9a8820bd70c0809317775d7f6eaa79844
- https://github.com/chamilo/chamilo-lms
- https://github.com/chamilo/chamilo-lms/releases/tag/v2.0.1
CVE-2026-45140 · published · modified · JSON