CVE-2026-22241 Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)
Administrators can upload arbitrary files via theme import, leading to remote code execution on the server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-22241?
CVE-2026-22241 is a high-severity vulnerability in gunet openeclass, published on 8 Jan 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an arbitrary file upload vulnerability in the theme import functionality enables an attacker with administrative privileges to upload arbitrary files on the server's file system. The main cause of the issue is that no validation or sanitization of the file's present inside the zip archive. This leads to remote code execution on the web server. Version 4.2 patches the issue.
Weakness: CWE-434
Which versions are affected by CVE-2026-22241?
It affects 1 product.
Products include Openeclass Openeclass.
How do I fix CVE-2026-22241?
No fix has been published for CVE-2026-22241 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-22241 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-22241 exists.
Public exploit code: 1 Exploit-DB entry and 3 proofs of concept on GitHub.