CVE-2026-124450

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0

Description Broken access control and path traversal exist in the fax/sms module disposeDocument action. Authenticated low-privilege users can exploit the unvalidated file path parameter to read the sqlconf.php file and recover database credentials. Additionally, this allows writing arbitrary files as the web user, which can lead to remote code execution (RCE), a process where an attacker executes malicious commands on a remote machine.

Recommendations Upgrade to OpenEMR version 8.3.0 or later.