CVE-2026-31941

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains a Server-Side Request Forgery (SSRF) vulnerability in the Social Wall feature. The endpoint read_url_with_open_graph accepts a URL from the user via the social_wall_new_msg_main POST parameter and performs two server-side HTTP requests to that URL without validating whether the target is an internal or external resource. This allows an authenticated attacker to force the server to make arbitrary HTTP requests to internal services, scan internal ports, and access cloud instance metadata. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.

• CWE-918

• https://github.com/chamilo/chamilo-lms/commit/e3790c5f0ff3b4dc547c2099fadf5c438c1bb265Patch
• https://github.com/chamilo/chamilo-lms/commit/ea6b7b7e90580c9b01dc4bcafe4ad737061e0eadPatch
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-q74c-mx8x-489hVendor Advisory

Published

Apr 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31935Suricata is a network IDS, IPS and NSM engine. Prior to vers…7.5
• CVE-2026-31937Suricata is a network IDS, IPS and NSM engine. Prior to vers…7.5
• CVE-2026-31938jsPDF is a library to generate PDFs in JavaScript. Prior to …6.1
• CVE-2026-31939Chamilo LMS is a learning management system. Prior to 1.11.3…8.3
• CVE-2026-3194A flaw has been found in Chia Blockchain 2.1.0. The affected…7
• CVE-2026-31940Chamilo LMS is a learning management system. Prior to 1.11.3…8.8
• CVE-2026-31942LibreChat is an enhanced ChatGPT clone that supports multipl…7.1
• CVE-2026-31943LibreChat is a ChatGPT clone with additional features. Prior…8.5
• CVE-2026-31944LibreChat is a ChatGPT clone with additional features. From …7.6
• CVE-2026-31945LibreChat is a ChatGPT clone with additional features. Versi…7.7
• CVE-2026-31946OpenOlat is an open source web-based e-learning platform for…9.8
• CVE-2026-31949LibreChat is a ChatGPT clone with additional features. Prior…6.5