CVE-2026-44720

The record

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4.

Affected packages

Related vulnerabilities

• GHSA-223g-f5mq-gw33 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled… Same vulnerability
• CVE-2026-41900 OpenLearnX is an open-source, decentralized learning and assessment platform. Also affects openlearnx
• GHSA-8h25-q488-4hxw OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code… Also affects openlearnx
• CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287
• CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass… CWE-287
• CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-287
• CVE-2026-107228 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-287
• CVE-2026-86781 The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40… CWE-287