PatchTheCVEopenolat vulnerabilities and fixes
Recent CVEs affecting openolat, with upgrade or downgrade steps. 2 tracked.
openolat has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-30. Highest priority: CVE-2026-31946 (score 42/100).
- CVE-2026-31946 CRITICAL 9.8 UPGRADE OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication
- CVE-2026-28228 HIGH 8.8 UPGRADE OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication
FAQ
How do I fix openolat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openolat being exploited right now?
None of the tracked openolat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openolat CVE should I patch first?
CVE-2026-31946 currently ranks highest (42/100): OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication.