CVE-2026-126469

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.5.0

Description Several scripts within the custom directory lack proper authorization checks because they rely solely on session authentication and fail to call the AclMain::aclCheckCore() function. This allows an authenticated user with low privileges to access the 'export labworks.php', 'chart tracker.php', and 'export registry xml.php' endpoints. Exploitation can lead to the disclosure of sensitive information, including patient Social Security Numbers (SSN), dates of birth (DOB), insurance data, and provider National Provider Identifiers (NPI) or tax IDs, as well as the ability to forge chart-tracker records.

Recommendations Update to version 8.5.0 or later. As a temporary mitigation, restrict access to the 'export labworks.php', 'chart tracker.php', and 'export registry xml.php' scripts.