SSRF in Openedx Openedx-Platform
CVE-2026-55421
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied files[].url, performs a server-side fetch using "requests.get(url, allow_redirects=True)". The fetched bytes are then returned inside a ZIP response. This enables SSRF with response exfiltration. Redirect-following is enabled, and there is no timeout in the vulnerable fetch path. This issue has been patched via commit 00b7c3c.
Vulnerability class: SSRF (Server-Side Request Forgery)
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Openedx Openedx-platform — versions < 00b7c3ce418b487c5696b064fc5033594b045e75
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-55421?
- CVE-2026-55421 is a medium-severity vulnerability in Openedx Openedx-Platform, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.8/10. Published 2026-09-02.
- How severe is CVE-2026-55421?
- Medium severity. CVSS v3 base score is 6.8 out of 10.