CVE-2026-34602 | Chamilo LMS up to 2.0.0-RC.2 /api/course_rel_users authorization

April 14, 2026 Yanac

A vulnerability categorized as critical has been discovered in Chamilo LMS up to 2.0.0-RC.2. This affects an unknown function of the file /api/course_rel_users. Such manipulation leads to authorization bypass.

This vulnerability is documented as CVE-2026-34602. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More