A vulnerability classified as problematic was found in Chamilo LMS up to 1.11.37/2.0.0-RC.2. Affected is an unknown function of the file lp_ajax_save_item.php. The manipulation results in authorization bypass.
This vulnerability is identified as CVE-2026-33702. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
