PT-2026-34605 · Openlearn · Openlearn

Jvr2022 · Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-41243

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenLearn versions prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab

Description When safeMode is enabled, unapproved forum posts are hidden from the public list. However, the direct post-read procedure still returns the full post to any user who possesses the post UUID.

Recommendations Update to commit 844b2a40a69d0c4911580fe501923f0b391313ab.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-41243

Affected Products

Openlearn

References · 4

• 🔥 https://github.com/siemvk/OpenLearn/security/advisories/GHSA-4rv3-hfh6-vqvm · Exploit
• https://github.com/siemvk/OpenLearn/commit/844b2a40a69d0c4911580fe501923f0b391313ab · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-41243 · Security Note
• https://twitter.com/CVEnew/status/2047359906643055043 · Twitter Post