GHSA-8h25-q488-4hxw (CVE-2026-41900)

Details

Overview

A critical Remote Code Execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. The issue has been fixed.

Affected Packages

openlearnx

npm

Fixed in:

2.0.3

References

ADVISORY

https://github.com/advisories/GHSA-8h25-q488-4hxw

PACKAGE

https://github.com/th30d4y/OpenLearnX

WEB

https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e

WEB

https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw