OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

보통 6.9CVE-2026-44720 · GHSA-223g-f5mq-gw33 · Published 27/05/2026 · updated 26/10/2026

요약

CVE-2026-44720은(는) openlearnx에 영향을 주는 보통 (CVSS 6.9) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.21%, 전체 취약점의 10.9%보다 높음.
조치: 2.0.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
openlearnx npm	`< 2.0.4`	`2.0.4`

Description

Overview

A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. The issue has been fixed.

Advisory: https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33

NVD description

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4.

References

th30d4y/OpenLearnX security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-44720 · ADVISORY
th30d4y/OpenLearnX · PACKAGE
th30d4y/OpenLearnX release v2.0.4 · WEB

openlearnx의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openlearnx

npm

< 2.0.4

2.0.4

Description

Overview

A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. The issue has been fixed.

Advisory: https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33

NVD description