Vulnerability in OpenEMR Affects Medical Data Sensitivity Controls

CVE-2026-32123

What is CVE-2026-32123?

A flaw in OpenEMR prior to version 8.0.0.1 compromises data sensitivity checks for group encounters. The application fails to appropriately restrict access based on sensitivity levels associated with group encounters, allowing unauthorized users to view sensitive medical information, such as mental health records. This issue arises because the system only references form_encounter for sensitivity, neglecting to check the sensitivities stored in form_groups_encounter, which leads to potential breaches of patient privacy.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References