What is the CVSS score of CVE-2026-29041?

CVE-2026-29041 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Chamilo Lms are affected by CVE-2026-29041?

Chamilo LMS installations prior to version 1.11.34 are vulnerable to remote code execution by authenticated users with low privilege levels, potentially allowing attackers to gain full system…

How to fix or mitigate CVE-2026-29041?

Within 24 hours: Inventory all Chamilo deployments and confirm versions; restrict file upload functionality to administrators only or disable uploads entirely if operationally feasible. Within 7 days: Implement strict file upload controls via WAF rules blocking executable file extensions (.php, .exe, .jsp, etc.) and enforce file type validation beyond MIME headers; monitor upload directories for suspicious activity. Within 30 days: Contact Chamilo for patch availability timeline; prepare upgrade testing plan; if patch remains unavailable, evaluate alternative LMS platforms or implement application-level code execution sandboxing.

Chamilo Lms CVE-2026-29041

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-03-06 security-advisories@github.com

RCE Chamilo Lms

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 06, 2026 - 04:16 nvd

HIGH 8.8

DescriptionGitHub Advisory

Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verification when handling file uploads and does not adequately validate file extensions or enforce safe server-side storage restrictions. As a result, an authenticated low-privileged user can upload a crafted file containing executable code and subsequently execute arbitrary commands on the server. This issue has been patched in version 1.11.34.

AnalysisAI

Authenticated arbitrary code execution in Chamilo LMS versions prior to 1.11.34 allows low-privileged users to bypass file upload restrictions through MIME-type spoofing and execute malicious commands on the server. The vulnerability stems from insufficient validation of file extensions and improper storage restrictions, enabling attackers to upload and execute arbitrary files. No patch is currently available for affected deployments.

Technical ContextAI

This vulnerability (CWE-434: Unrestricted Upload of File with Dangerous Type) affects Chamilo Lms. Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verification when handling file uploads and does not adequately validate file extensions or enforce safe server-side storage restrictions. As a result, an authenticated low-privileged user can upload a crafted file containing executable code and subsequently ex

RemediationAI

Fixed in version 1.11.34.. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.