CVE-2026-33702 | Chamilo LMS up to 1.11.37/2.0.0-RC.2 lp_ajax_save_item.php authorization

A vulnerability classified as problematic was found in Chamilo LMS up to 1.11.37/2.0.0-RC.2. Affected is an unknown function of the file lp_ajax_save_item.php. The manipulation results in authorization bypass. This vulnerability is identified as CVE-2026-33702. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.