Chamilo LMS versions prior to 2.0.0-RC.3 are vulnerable to OS Command Injection via the _cid session variable in the export_all_certificates action, potentially leading to arbitrary command execution.
PoC
cve-2026-35196
os command injection
chamilo lms
web application
2r
1t
1c
updated