Unrestricted File Upload Vulnerability in Chamilo LMS by Chamilo
CVE-2026-32931
7.5HIGH
What is CVE-2026-32931?
Chamilo LMS, a popular learning management system, contains an unrestricted file upload vulnerability in the exercise sound upload feature. This flaw allows authenticated users, specifically teachers, to upload malicious PHP files disguised with an audio/mpeg Content-Type header. These files retain their .php extension and are stored in a directory accessible via the web, which can facilitate remote code execution by an attacker under the privileges of the web server user (www-data). The issue has been addressed in versions 1.11.38 and 2.0.0-RC.3.
Affected Version(s)
chamilo-lms < 1.11.38 < 1.11.38
chamilo-lms >= 2.0.0-alpha.1, < 2.0.0-RC.3 < 2.0.0-alpha.1, 2.0.0-RC.3