CVE-2026-41900: OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

April 23, 2026 (updated May 11, 2026)

Overview

A critical Remote Code Execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. The issue has been fixed.

References

github.com/advisories/GHSA-8h25-q488-4hxw
github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e
github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix
github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw
nvd.nist.gov/vuln/detail/CVE-2026-41900

Code Behaviors & Features

Detect and mitigate CVE-2026-41900 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →