CVE-2026-45140

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions prior to 2.0.1

Description Chamilo LMS, an open-source learning management system, contains a flaw that allows an unauthenticated remote attacker to execute arbitrary code directly on the server. The authoritative advisory does not identify the specific affected endpoint, component, input, or exploitation mechanism.

Recommendations Update Chamilo LMS to version 2.0.1. Restrict access to the LMS interface to trusted internal networks or require VPN authentication. Review web server access logs for unusual POST requests or script execution attempts in uploads/plugins directories.