Vulnerability in Open-Emr Openemr
CVE-2025-67645
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters (pubpid / pid) to reference another user’s record; the server accepts the modified IDs and applies the changes to that other user’s profile. This allows one user to alter another user’s profile data (name, contact info, etc.), and could enable account takeover. Version 7.0.4 fixes the issue.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.004 (30.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 30th percentile — 30.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.000
Affected products
- Open-Emr Openemr — versions 7.0.3
- Openemr — versions < 7.0.4
Weakness classification (CWE)
References
- github.com/openemr/openemr/security/advisories/GHSA-vjmv-cf46-gffv (Exploit, Vendor Advisory)
- github.com/openemr/openemr/commit/e2a682ee71aac71a9f04ae566f4ffca10052bc4a (Patch)
Frequently asked questions
- What is CVE-2025-67645?
- CVE-2025-67645 is a high-severity vulnerability in Open-Emr Openemr, classified under Improper Access Control. CVSS score: 8.8/10. Published 2026-01-28.
- How severe is CVE-2025-67645?
- High severity. CVSS v3 base score is 8.8 out of 10.