CVE-2026-41900
CVE-2026-41900 · OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.
CVSS 8.8 · High · EPSS 0.9% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
openlearnx
- Versions
- < 2.0.3: Affected
No fix published
openlearnx npm
- Affected ranges
- SEMVER: < 2.0.3
Update to 2.0.3