PT-2026-5034 · Openemr · Openemr

Published 2026-01-27 · Updated 2026-02-12 · CVE-2025-67645

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.0.4

Description OpenEMR is an electronic health records and medical practice management application. A broken access control exists in the Profile Edit endpoint. An authenticated user can modify request parameters (pubpid / pid) to reference another user’s record. The server accepts these modified IDs and applies changes to the other user’s profile, allowing alteration of profile data like name and contact information, potentially leading to account takeover. The affected API endpoint is the Profile Edit endpoint.

Recommendations Update to version 7.0.4 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-67645

GHSA-VJMV-CF46-GFFV

Affected Products

Openemr

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67645.json · Exploit
• https://github.com/openemr/openemr/security/advisories/GHSA-vjmv-cf46-gffv · Vendor Advisory
• https://github.com/openemr/openemr/commit/e2a682ee71aac71a9f04ae566f4ffca10052bc4a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-67645 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67645 · Vendor Advisory
• https://twitter.com/cracbot/status/2018278266851958829 · Twitter Post
• https://twitter.com/pulsepatchio/status/2016525753161302206 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016340731510530116 · Twitter Post
• https://twitter.com/CVEnew/status/2016296316025110930 · Twitter Post
• https://t.me/cveNotify/151880 · Telegram Post
• https://t.me/cveNotify/150056 · Telegram Post