CVE-2026-31941: Server-Side Request Forgery (SSRF) in Chamilo LMS
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains a Server-Side Request Forgery (SSRF) vulnerability in the Social Wall feature. The endpoint readurlwithopengraph accepts a URL from the user via the socialwallnewmsgmain POST parameter and performs two server-side HTTP requests to that URL without validating whether the target is an internal or external resource. This allows an authenticated attacker to force the server to make arbitrary HTTP requests to internal services, scan internal ports, and access cloud instance metadata. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31941?
CVE-2026-31941 has been rated as a high-severity vulnerability due to its potential for exploitation via Server-Side Request Forgery.
How do I fix CVE-2026-31941?
To fix CVE-2026-31941, upgrade Chamilo LMS to version 1.11.38 or 2.0.0-RC.3 or higher.
Which versions of Chamilo LMS are affected by CVE-2026-31941?
Chamilo LMS versions prior to 1.11.38 and prior to 2.0.0-RC.3 are affected by CVE-2026-31941.
What feature in Chamilo LMS is vulnerable in CVE-2026-31941?
The vulnerability in CVE-2026-31941 lies within the Social Wall feature of Chamilo LMS.
What type of vulnerability is CVE-2026-31941?
CVE-2026-31941 is categorized as a Server-Side Request Forgery (SSRF) vulnerability.