Vulnerability · Published Mar 25, 2026 · Assigned by GitHub_M

CVE-2026-34056OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data

High 7.7

In plain English

A high-severity security flaw in openemr from openemr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.3%top 79.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access Control vulnerability in OpenEMR up to and including version 8.0.0.3 allows low-privilege users to view and download Ensora eRx error logs without proper authorization checks. This flaw compromises system confidentiality by exposing sensitive information, potentially leading to unauthorized data disclosure and misuse. As of time of publication, no known patches versions are available.

Affected products (as reported)

Vendor	Product	Versions
openemr	openemr	<= 8.0.0.3

Weakness: CWE-285, CWE-425 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References

https://github.com/openemr/openemr/security/advisories/GHSA-6qg7-6jf3-xrfh x_refsource_CONFIRM
https://github.com/openemr/openemr/releases/tag/v8_0_0_3 x_refsource_MISC