Arbitrary file upload in Chamilo Chamilo-Lms
CVE-2026-29041
Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verification when handling file uploads and does not adequately validate file extensions or enforce safe server-side storage restrictions. As a result, an authenticated low-privileged user can upload a crafted file containing executable code and subsequently execute arbitrary commands on the server. This issue has been patched in version 1.11.34.
Vulnerability class: Unrestricted File Upload
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.010 (62.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 62nd percentile — 62.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.010 · change: +0.003
Affected products
- Chamilo Chamilo-Lms — versions < 1.11.34
- Chamilo Lms
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/chamilo/chamilo-lms/security/advisories/GHSA-4pc3-4w2v-vwx8 (Mitigation, Vendor Advisory)
- github.com/chamilo/chamilo-lms/releases/tag/v1.11.34 (Product, Release Notes)
Frequently asked questions
- What is CVE-2026-29041?
- CVE-2026-29041 is a high-severity vulnerability in Chamilo Chamilo-Lms, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2026-03-06.
- How severe is CVE-2026-29041?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2026-29041 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.