High severityNVD Advisory· Published Nov 11, 2026

CVE-2026-63194

Description

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bahmni/bahmnicorellm-fuzzy
Range: = 0.93.1

Patches

Vulnerability mechanics

References

github.com/Bahmni/bahmni-core/security/advisories/GHSA-pmw7-2mfv-4592nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000