Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-25127

OpenEMR has Broken Access Control on Care Coordination Module

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openemr openemr

  • < 8.0.0affected

References