CVE-2026-29041 - Vulnerability Analysis

Overview

Chamilo LMS < 1.11.34 contains an authenticated remote code execution caused by improper validation of uploaded files relying only on MIME-type verification, letting authenticated low-privileged users execute arbitrary commands on the server.

Severity & Score

Impact

Authenticated low-privileged users can execute arbitrary commands on the server, potentially leading to full system compromise.

Mitigation

Update to version 1.11.34 or later.

References

• https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.34
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-4pc3-4w2v-vwx8

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 6, 2026

🟠 CVE-2026-29041 - High (8.8) Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verifica... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-29041/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

GitHub Repositories(1 repo)

• https://github.com/celeboy711-hue/CVE-2026-29041

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner