CVE-2025-50194: Chamilo: OS Command Injection in /main/cron/lang/check_parse_lang.php

Q: What is the severity of CVE-2025-50194?

CVE-2025-50194 is classified as a critical severity vulnerability due to its potential for OS command injection.

Q: How do I fix CVE-2025-50194?

To fix CVE-2025-50194, upgrade Chamilo to version 1.11.30 or later where the vulnerability has been patched.

Q: What is affected by CVE-2025-50194?

CVE-2025-50194 affects Chamilo versions prior to 1.11.30, specifically the file /main/cron/lang/check_parse_lang.php.

Q: What could an attacker do exploiting CVE-2025-50194?

An attacker exploiting CVE-2025-50194 could execute arbitrary OS commands, potentially compromising the system.

Q: Is there a workaround for CVE-2025-50194?

There are no recommended workarounds for CVE-2025-50194; the best mitigation is to upgrade to the fixed version.

Published Mar 2, 2026

Updated

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/cron/lang/checkparselang.php. This issue has been patched in version 1.11.30.

Affected Software

2 affected components

Chamilo Chamilo<1.11.30

Chamilo Chamilo LMS<1.11.30

Remediation

Patch Available

https://github.com/chamilo/chamilo-lms/commit/4d07349340543b9c913e76f8cb436a4570500ce2

Event History

Mar 2, 2026

CVE Published

via MITRE·03:16 PM

Data Sourced

via MITRE·03:16 PM

DescriptionWeakness

Data Sourced

via NVD·04:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

May 13, 58140

Event

via NVD·03:04 PM

Frequently Asked Questions

What is the severity of CVE-2025-50194?

CVE-2025-50194 is classified as a critical severity vulnerability due to its potential for OS command injection.

How do I fix CVE-2025-50194?