CVE-2026-47161: CWE-502: Deserialization of Untrusted Data in inducer relate
RELATE, a web-based courseware package by inducer, had a vulnerability prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb where its Celery workers accepted and deserialized untrusted pickle data. This flaw allowed an attacker with access to the message broker to execute arbitrary commands on the host server. Additionally, the lack of network isolation in the code execution sandbox enabled an authenticated student to achieve full remote code execution (RCE) on the host system. The issue was fixed in the specified commit.
AI Analysis
Technical Summary
CVE-2026-47161 is a deserialization vulnerability (CWE-502) in the RELATE LMS product by inducer. Before commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, the system's Celery workers were configured to accept and deserialize untrusted pickle data from the message broker. This allowed attackers who could reach the message broker to execute arbitrary commands on the host. The vulnerability is exacerbated by missing network isolation in the code execution sandbox, enabling authenticated students to escalate to full remote code execution on the host system. The vulnerability has a CVSS 4.0 score of 8.7 (high severity).
Potential Impact
An attacker with access to the message broker can execute arbitrary commands on the host server, leading to full remote code execution. Authenticated students can exploit this vulnerability due to missing network isolation in the sandbox, potentially compromising the entire host system.
Mitigation Recommendations
The vulnerability is fixed in commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb. Users should upgrade RELATE to versions including or after this commit to remediate the issue. Patch status is not explicitly stated beyond this commit fix; verify with the vendor or source repository for official patched releases.
CVE-2026-47161: CWE-502: Deserialization of Untrusted Data in inducer relate
Description
RELATE, a web-based courseware package by inducer, had a vulnerability prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb where its Celery workers accepted and deserialized untrusted pickle data. This flaw allowed an attacker with access to the message broker to execute arbitrary commands on the host server. Additionally, the lack of network isolation in the code execution sandbox enabled an authenticated student to achieve full remote code execution (RCE) on the host system. The issue was fixed in the specified commit.
CVSS v4.0
Score 8.7high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-47161 is a deserialization vulnerability (CWE-502) in the RELATE LMS product by inducer. Before commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, the system's Celery workers were configured to accept and deserialize untrusted pickle data from the message broker. This allowed attackers who could reach the message broker to execute arbitrary commands on the host. The vulnerability is exacerbated by missing network isolation in the code execution sandbox, enabling authenticated students to escalate to full remote code execution on the host system. The vulnerability has a CVSS 4.0 score of 8.7 (high severity).
Potential Impact
An attacker with access to the message broker can execute arbitrary commands on the host server, leading to full remote code execution. Authenticated students can exploit this vulnerability due to missing network isolation in the sandbox, potentially compromising the entire host system.
Mitigation Recommendations
The vulnerability is fixed in commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb. Users should upgrade RELATE to versions including or after this commit to remediate the issue. Patch status is not explicitly stated beyond this commit fix; verify with the vendor or source repository for official patched releases.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-18T21:25:34.496Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a17476ae29bf47b50e3542a
Added to database: 05/27/2026, 19:35:06 UTC
Last enriched: 06/03/2026, 20:53:06 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 46
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.