Skip to content
OpenAdvisories

Vendor

aehrc

6 known vulnerabilities.

Products

pathling 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.6
    CVE-2026-47664

    Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` operation in Pathling Server accepts a caller-supplied `exportUrl` and uses it as th…

    aehrc pathling
  • High 8.7
    CVE-2026-47663

    Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operat…

    aehrc pathling
  • High 8.7
    CVE-2026-47662

    Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operat…

    aehrc pathling
  • High 8.7
    CVE-2026-47661

    Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply …

    aehrc pathling
  • High 8.7
    CVE-2026-47660

    Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit `oauthMetadataUrl` …

    aehrc pathling
  • High 8.7
    CVE-2026-47659

    Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}

    Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply …

    aehrc pathling