CVE-2026-124485

CVSS 7.1 (high) · published 2026-11-08

OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows authenticated patients to read other patients' documents by overriding query criteria. Attackers can send empty pid_Equals and denialReason_IsNotLike parameters to remove patient scoping and locked filters, exposing consent bodies, signatures, file paths, and template data.

Weakness: CWE-639

Source: NVD CVE-2026-124485

References

• https://github.com/openemr/openemr/security/advisories/GHSA-v688-m84c-5h4v
• https://www.vulncheck.com/advisories/openemr-before-8.3.0-cross-patient-document-disclosure-via-onsite-documents-api
• https://github.com/openemr/openemr/security/advisories/GHSA-v688-m84c-5h4v

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.