Improper Authorization Vulnerability in OpenEMR Rainforest Patient Portal Payments

CVE-2026-124481

What is CVE-2026-124481?

OpenEMR, prior to version 8.4.0, is susceptible to an improper authorization issue within the Rainforest patient portal payments. This vulnerability allows authenticated patients to manipulate JSON data sent to the portal_payment.rainforest.php script, leveraging client-supplied values such as patientId, encounter, and amount. Consequently, this manipulation can lead to unauthorized activity where patients could create fraudulent ar_activity credits for other patients' encounters, potentially exceeding the legitimate amounts paid, undermining the security and integrity of financial transactions within the healthcare system.

References