PT-2026-32010 · Unknown · Chamilo Lms

Published 2026-04-10 · Updated 2026-04-11 · CVE-2026-32931

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions prior to 1.11.38 and prior to 2.0.0-RC.3

Description Chamilo LMS, a learning management system, contains a file upload issue in the exercise sound upload function. An authenticated teacher can upload a PHP webshell by manipulating the Content-Type header to audio/mpeg. The uploaded file keeps its original .php extension and is stored in a web-accessible directory, leading to Remote Code Execution as the web server user (www-data).

Recommendations Update to version 1.11.38 or later. Update to version 2.0.0-RC.3 or later.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-32931

Affected Products

Chamilo Lms

References · 6

• https://github.com/chamilo/chamilo-lms/commit/8cbe660de267f2b6ed625433bdfcf38dee8752b4 · Patch
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-863j-h6pf-3xhx · Vendor Advisory
• https://github.com/chamilo/chamilo-lms/commit/d5ef5153df3d1b2de112cbeb190cdd10bea457f3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32931 · Security Note
• https://twitter.com/VulmonFeeds/status/2042789646262837280 · Twitter Post
• https://twitter.com/CVEnew/status/2042710208175112667 · Twitter Post