What is CVE-2026-45140?

CVE-2026-45140 is a critical-severity vulnerability in Chamilo Chamilo-Lms, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-09-17.

How severe is CVE-2026-45140?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Chamilo Chamilo-Lms

CVE-2026-45140

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Chamilo Chamilo-lms — versions < 2.0.1

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-45140?: CVE-2026-45140 is a critical-severity vulnerability in Chamilo Chamilo-Lms, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-09-17.
How severe is CVE-2026-45140?: Critical severity. CVSS v3 base score is 9.8 out of 10.