Critical severity9.8NVD Advisory· Published Sep 17, 2026· Updated Sep 24, 2026
CVE-2026-45140
CVE-2026-45140
Description
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
chamilo/chamilo-lmsPackagist | < 2.0.1 | 2.0.1 |
Affected products
1Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.