Unrated severityOSV Advisory· Published Jan 27, 2026· Updated Jan 28, 2026
OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege
CVE-2025-54373
Description
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has Sensitivity=high, can be viewed and changed by users who do not have Sensitivities=high privilege. Version 7.0.4 fixes the issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/openemr/openemr/commit/aef3d1c85d9ff2f28d3d361d2818aee79b6dcd33mitrex_refsource_MISC
- github.com/openemr/openemr/security/advisories/GHSA-739g-6m63-p7frmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.