CVE-2026-55421 | openedx Open edX Platform URL Fetch requests.get files[].url server-side request forgery

September 2, 2026 Yanac

A vulnerability classified as problematic was found in openedx Open edX Platform. This vulnerability affects the function requests.get of the component URL Fetch. Such manipulation of the argument files[].url leads to server-side request forgery.

This vulnerability is listed as CVE-2026-55421. The attack may be performed from remote. There is no available exploit.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More