p PatchFirst

PatchFirst · Latest vulnerabilities

openlearnx vulnerabilities

Vulnerabilities published for openlearnx in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2026-44720

    Medium · CVSS 6.9EPSS 0.21%Fix available

    OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

    OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4.

    openlearnxNode.js
    • Update to 2.0.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2026-41900

    High · CVSS 8.8EPSS 0.91%Fix available

    OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

    OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.

    openlearnxNode.js
    • Update to 2.0.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →