by Michael Hawkins. Additional sanitizing was required on a TeX filter administration setting to prevent a remote code execution risk. Note: The affected setting could only be accessed by site administrators, and only affected sites with the TeX notation filter enabled and ImageMagick installed on the server. Severity/Risk: Serious Versions affected: 5.1 to 5.1.1, 5.0 to 5.0.4, 4.5 to 4.5.8 and earlier unsupported versions Versions fixed: 5.1.2, 5.0.5 and 4.5.9 Reported by: Vicevirus CVE identifier: CVE-2026-26046 Changes (main): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-87843 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-87870 Tracker issue: MDL-87843 and MDL-87870 Remote code execution risk in TeX filter admin setting