CVE-2026-41900

HIGH8.8

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

Published May 8, 2026

Modified 2 weeks ago

Details

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.

References

WEB

https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e

WEB

https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix

WEB

https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-41900

CVSS Analysis

CVSS v3.1

8.8