Broken Access Control and Path Traversal Vulnerability in OpenEMR Fax/SMS Module

CVE-2026-124450

What is CVE-2026-124450?

OpenEMR versions prior to 8.3.0 have a significant vulnerability in the fax/sms module due to broken access control and path traversal. This flaw allows authenticated low-privilege users to exploit an unvalidated file_path parameter within the disposeDocument action. By taking advantage of this issue, attackers can read sensitive files such as sqlconf.php, thereby obtaining database credentials. Additionally, they can execute arbitrary file writes as the web user, potentially leading to remote code execution, which poses a serious risk to system security.

References