CVE-2026-44720 — OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

CVE-2026-44720

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover PUBLISHED

Description (CNA)

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4.

Affected (CNA)

Vendor / product	Versions
th30d4y / OpenLearnX	affected < 2.0.4

CWE

CWE-287, CWE-347

References

https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.