RELATE LMS allows Celery workers to deserialize untrusted pickle data. If an attacker can reach the message broker, they can execute arbitrary commands on the host, compromising confidentiality, integrity, and availability. Because the code execution sandbox lacks network isolation, an authenticated student can obtain full Remote Code Execution on the host system.

The vulnerability affects RELATE LMS from inducer:relate, specifically any release prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb. All users of the unpatched version are susceptible.

The CVSS score of 8.7 indicates high severity. Exploitation requires attacker access to the Celery message broker, which may be reachable if the broker is not network isolated. Once in position, a crafted pickle payload grants full control of the host. No EPSS data is available and the vulnerability is not listed in KEV, but the combination of high impact and achievable attack path makes this a significant risk for organizations running unpatched RELATE instances.