CVE-2026-33707

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sha1($email) with no random component, no expiration, and no rate limiting. An attacker who knows a user's email can compute the reset token and change the victim's password without authentication. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.

• CWE-640

• https://github.com/chamilo/chamilo-lms/commit/078d7e5b77679fa7ccfcd6783bd5cc683db0bda8Patch
• https://github.com/chamilo/chamilo-lms/commit/750a45312a0d5c3ad60dbfbd0d959ca40be4a18cPatch
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-f27g-66gq-g7v2Vendor Advisory

Published

Apr 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33701OpenTelemetry Java Instrumentation provides OpenTelemetry au…9.8
• CVE-2026-33702Chamilo LMS is a learning management system. Prior to 1.11.3…7.1
• CVE-2026-33703Chamilo LMS is a learning management system. Prior to 2.0.0-…6.5
• CVE-2026-33704Chamilo LMS is a learning management system. Prior to 1.11.3…8.8
• CVE-2026-33705Chamilo LMS is a learning management system. Prior to 1.11.3…5.3
• CVE-2026-33706Chamilo LMS is a learning management system. Prior to 1.11.3…7.1
• CVE-2026-33708Chamilo LMS is a learning management system. Prior to 1.11.3…6.5
• CVE-2026-33709JupyterHub is software that allows one to create a multi-use…6.1
• CVE-2026-3371The Tutor LMS – eLearning and online course solution plugin …4.3
• CVE-2026-33710Chamilo LMS is a learning management system. Prior to 1.11.3…7.5
• CVE-2026-33711Incus is a system container and virtual machine manager. Inc…7.8
• CVE-2026-33712Typebot is a chatbot builder tool. In versions 3.15.2 and pr…10