-
Critical 17 Sep 2026
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
Fixed in 2.0.1 · CVE-2026-45140
Check your project in one command
Composer compares your composer.lock with the public advisory databases:
composer audit
It lists every installed package with a known advisory, including chamilo/chamilo-lms, and the version that fixes it.