CVE-2026-114389 | Chamilo LMS 2.0.0-alpha.4 AiController openAnswerGrade exeId/questionId improper authorization

October 21, 2026 Yanac

A vulnerability classified as critical has been found in Chamilo LMS 2.0.0-alpha.4. Affected by this vulnerability is the function AiController::openAnswerGrade of the component AiController. The manipulation of the argument exeId/questionId leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-114389. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More