What is the CVSS score of CVE-2025-67645?

CVE-2025-67645 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openemr are affected by CVE-2025-67645?

OpenEMR instances running versions prior to 7.0.4 contain a critical access control vulnerability that allows unauthorized users to modify patient profiles and potentially access protected health…. A patch is available.

Is there a public PoC exploit available for CVE-2025-67645?

Yes, a public proof-of-concept exploit is available for CVE-2025-67645. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-67645?

Within 24 hours: Identify all OpenEMR instances in your environment and document current versions. Within 7 days: Apply vendor patch to upgrade all affected systems to version 7.0.4 or later, prioritizing production environments first. Within 30 days: Conduct access control audit of patient profile modifications made during the vulnerability window and validate patch deployment across all instances.

Openemr CVE-2025-67645

HIGH

Improper Access Control (CWE-284)

2026-01-28 security-advisories@github.com

Authentication Bypass Openemr

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 12, 2026 - 20:50 vuln.today

Public exploit code

Patch released

Feb 12, 2026 - 20:50 nvd

Patch available

CVE Published

Jan 28, 2026 - 00:15 nvd

HIGH 8.8

DescriptionGitHub Advisory

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters (pubpid / pid) to reference another user’s record; the server accepts the modified IDs and applies the changes to that other user’s profile. This allows one user to alter another user’s profile data (name, contact info, etc.), and could enable account takeover. Version 7.0.4 fixes the issue.

AnalysisAI

Technical ContextAI

Classified as CWE-284 (Improper Access Control). Affects the Profile Edit component of Openemr. OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters (pubpid / pid) to reference another user’s record; the server accepts the modified IDs and applies the changes to that other user’s profile. This allows one user to alter another user’s profile data (name, contact info, etc.), and could enable accou

RemediationAI

A vendor patch is available — apply it immediately. Restrict network access to the affected service where possible.

CVE-2025-67645 vulnerability details – vuln.today

Back

Openemr CVE-2025-67645

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code