GHSA-8h25-q488-4hxw

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

Source: GitHub Advisory Database (reviewed) High CVE-2026-41900

Packages

Ecosystem	Package	Affected	Fixed in
npm	openlearnx	< 2.0.3	2.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

## Overview A critical Remote Code Execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. The issue has been fixed.

References

External links from the advisory. They lead to third-party sites.

https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw web
https://nvd.nist.gov/vuln/detail/CVE-2026-41900 advisory
https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e web
https://github.com/th30d4y/OpenLearnX package
https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix web