PT-2026-40591 · Th30D4Y+1 · Openlearn

Krrazee · Published 2026-05-13 · Updated 2026-05-28 · CVE-2026-44720

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenLearnX versions prior to 2.0.4

Description An authentication issue in this open-source, decentralized learning and assessment platform could allow unauthorized access to user accounts under specific conditions.

Recommendations Update to version 2.0.4.

Fix

Improper Authentication

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-287

CWE-347

Related Identifiers

CVE-2026-44720

GHSA-223G-F5MQ-GW33

Affected Products

Openlearn

References · 7

• https://osv.dev/vulnerability/GHSA-223g-f5mq-gw33 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44720 · Security Note
• https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33 · Note
• https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.4 · Note
• https://github.com/th30d4y/OpenLearnX · Note
• https://t.me/CVEtracker/55184 · Telegram Post
• https://t.me/cveNotify/164952 · Telegram Post