CVE-2026-41900
High · 8.8CVSS
8.8
EPSS
1.1%
Published
May 8, 2026
CISA due date
—
The record
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | openlearnx | 0 | 2.0.3 |
Related vulnerabilities
- GHSA-8h25-q488-4hxw OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code… Same vulnerability
- CVE-2026-44720 OpenLearnX is an open-source, decentralized learning and assessment platform. Also affects openlearnx
- GHSA-223g-f5mq-gw33 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled… Also affects openlearnx
- CVE-2026-96376 Improper Neutralization of Special Elements used in an OS Command ("OS Command… CWE-78
- CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-78