CVE-2026-41900

🗓️ 08 May 2026 03:25:50Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 7 Views🌐 WEB

OpenLearnX had remote code execution in its code execution environment before version 2.0.3; patched.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for CVE-2026-41900	6 May 202619:07	–	githubexploit
ATTACKERKB	CVE-2026-41900	8 May 202603:25	–	attackerkb
Circl	CVE-2026-41900	6 May 202623:00	–	circl
CNNVD	OpenLearnX 操作系统命令注入漏洞	8 May 202600:00	–	cnnvd
Cvelist	CVE-2026-41900 OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment	8 May 202603:25	–	cvelist
Github Security Blog	OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment	23 Apr 202621:46	–	github
NVD	CVE-2026-41900	8 May 202604:16	–	nvd
OSV	GHSA-8H25-Q488-4HXW OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment	23 Apr 202621:46	–	osv
Positive Technologies	PT-2026-34824	23 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-41900	5 Jun 202619:20	–	redhatcve

NVD

Vulners

Node

th30d4y openlearnxMatch2.0.1node.js

[
  {
    "vendor": "th30d4y",
    "product": "OpenLearnX",
    "versions": [
      {
        "version": "< 2.0.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw
github	www.github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e
github	www.github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix

Parameter	Position	Path	Description	CWE
user_code	request body	/api/compiler/execute	Unauthenticated code execution via container volume mount (OpenLearnX)	CWE-250, CWE-94, CWE-78, CWE-693, CWE-284

29 May 2026 14:54Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8 - 10

EPSS0.00168

SSVC

OpenLearnX Remote code execution Sandbox escape Code execution environment Version 2.0.3 Patched in update