Skip to content
OpenAdvisories

Vendor

OpenOLAT

7 known vulnerabilities.

Products

OpenOLAT 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-31946

    OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow

    OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. From version 10.5.4 to before version 20.2.5, OpenOLAT's OpenID Connect implicit flow implementation does not verify JWT signatures. The JSONWebToke…

    OpenOLAT OpenOLAT