Vulnerability in Open-Emr Openemr
CVE-2025-67645
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters (pubpid / pid) to reference another user’s record; the server accepts the modified IDs and applies the changes to that other user’s profile. This allows one user to alter another user’s profile data (name, contact info, etc.), and could enable account takeover. Version 7.0.4 fixes the issue.
EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Open-emr Openemr — versions 7.0.3
- Openemr — versions < 7.0.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-67645?
- CVE-2025-67645 is a high-severity vulnerability in Open-Emr Openemr, classified under Improper Access Control. CVSS score: 8.8/10. Published 2026-01-28.
- How severe is CVE-2025-67645?
- High severity. CVSS v3 base score is 8.8 out of 10.