CVE-2026-31939: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in chamilo chamilo-lms
Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is concatenated directly into filesystem path without canonicalization or traversal checks. This vulnerability is fixed in 1.11.38.
AI Analysis
Technical Summary
CVE-2026-31939 is a path traversal vulnerability (CWE-22) in Chamilo LMS before version 1.11.38. The issue arises because user-supplied input from $_REQUEST['test'] is used directly in a filesystem path in main/exercise/savescores.php without validation or canonicalization, allowing attackers with at least low privileges to delete arbitrary files on the server. This vulnerability also relates to improper handling of file operations (CWE-73). The vulnerability is addressed in Chamilo LMS 1.11.38.
Potential Impact
Successful exploitation can lead to arbitrary file deletion on the affected system, impacting integrity and availability of files managed by the LMS. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality (low), integrity (high), and availability (high). No known exploits in the wild have been reported.
Mitigation Recommendations
Upgrade Chamilo LMS to version 1.11.38 or later, where this vulnerability is fixed. There is no official patch link provided, but the vendor has resolved the issue in the stated version. Until upgrading, restrict access to the vulnerable component and validate or sanitize inputs to prevent path traversal.
CVE-2026-31939: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in chamilo chamilo-lms
Description
Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is concatenated directly into filesystem path without canonicalization or traversal checks. This vulnerability is fixed in 1.11.38.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-31939 is a path traversal vulnerability (CWE-22) in Chamilo LMS before version 1.11.38. The issue arises because user-supplied input from $_REQUEST['test'] is used directly in a filesystem path in main/exercise/savescores.php without validation or canonicalization, allowing attackers with at least low privileges to delete arbitrary files on the server. This vulnerability also relates to improper handling of file operations (CWE-73). The vulnerability is addressed in Chamilo LMS 1.11.38.
Potential Impact
Successful exploitation can lead to arbitrary file deletion on the affected system, impacting integrity and availability of files managed by the LMS. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality (low), integrity (high), and availability (high). No known exploits in the wild have been reported.
Mitigation Recommendations
Upgrade Chamilo LMS to version 1.11.38 or later, where this vulnerability is fixed. There is no official patch link provided, but the vendor has resolved the issue in the stated version. Until upgrading, restrict access to the vulnerable component and validate or sanitize inputs to prevent path traversal.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-03-10T15:10:10.655Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d938791cc7ad14dad95274
Added to database: 4/10/2026, 5:50:49 PM
Last enriched: 4/10/2026, 6:06:32 PM
Last updated: 4/11/2026, 6:06:51 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.