Skip to content
OpenAdvisories
High · 7.1 CVE-2025-54373 EUVD-2025-206414

OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege

Published Jan 27, 2026 · Updated Jan 28, 2026 · Assigned by GitHub_M

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has Sensitivity=high, can be viewed and changed by users who do not have Sensitivities=high privilege. Version 7.0.4 fixes the issue.

Affected products

VendorProductAffectedFixed
openemr openemr < 7.0.4 —

References