Horizontal Privilege Escalation in OpenEMR Portal by OpenEMR

CVE-2026-25147

What is CVE-2026-25147?

OpenEMR, a widely-used open source electronic health records system, contains a vulnerability in the payment portal prior to version 8.0.0. This issue allows an authenticated patient to manipulate the patient ID on the request, which could lead to unauthorized access to another patient's sensitive information, such as demographic details, invoices, and payment histories. By leveraging this flaw, attackers can engage in horizontal privilege escalation and insecure direct object references (IDOR). The issue has been addressed in version 8.0.0 with a fix that ensures the use of the authenticated user’s patient ID.

References