CVE-2026-62129

Summary

CVE-2026-62129 is a critical vulnerability in Creator LMS that allows authenticated users to upload arbitrary files, potentially leading to remote code execution. This flaw is particularly dangerous because it affects the contributor role, which may be granted to users who should only have limited content creation capabilities.

Exploitability

Exploitation requires an authenticated user account with contributor privileges, making it moderately difficult to achieve but not highly complex, as most LMS platforms allow contributor accounts to be created by administrators or through self-registration.

Blast radius

If exploited, this vulnerability could allow attackers to upload malicious files that execute arbitrary code on the server, potentially compromising the entire learning management system and all user data it contains.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Creator LMS version 1.2.22 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.