What is the CVSS score of CVE-2026-34056?

CVE-2026-34056 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openemr are affected by CVE-2026-34056?

OpenEMR versions up to 8.0.0.3 contain a broken access control vulnerability allowing low-privilege authenticated users to view and download sensitive Ensora eRx error logs, potentially exposing…

How to fix or mitigate CVE-2026-34056?

Within 24 hours: Inventory all OpenEMR 8.0.0.3 and earlier installations and verify network accessibility; document current user roles and access levels. Within 7 days: Implement network segmentation to restrict OpenEMR access to authorized clinical staff only, and review access logs for suspicious eRx log downloads by low-privilege users. Within 30 days: Contact OpenEMR vendor for patch timeline; evaluate upgrade path to versions beyond 8.0.0.3 when available, or implement application-level access controls to restrict eRx log visibility pending patch release.

Openemr CVE-2026-34056

HIGH

Improper Authorization (CWE-285)

2026-03-25 GitHub_M

Information Disclosure Openemr

7.7

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 00:12 vuln.today

CVE Published

Mar 25, 2026 - 23:53 nvd

HIGH 7.7

DescriptionGitHub Advisory

OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access Control vulnerability in OpenEMR up to and including version 8.0.0.3 allows low-privilege users to view and download Ensora eRx error logs without proper authorization checks. This flaw compromises system confidentiality by exposing sensitive information, potentially leading to unauthorized data disclosure and misuse. As of time of publication, no known patches versions are available.

AnalysisAI

Low-privilege authenticated users in OpenEMR versions up to and including 8.0.0.3 can view and download Ensora eRx error logs due to missing authorization checks, exposing sensitive healthcare system information. This broken access control vulnerability (CVSS 7.7) affects network-accessible installations and has a 3% EPSS exploitation probability (8th percentile), with no public exploit identified at time of analysis. No vendor-released patch identified at time of analysis according to the CVE disclosure.

Technical ContextAI

OpenEMR is an open-source electronic health records and medical practice management system widely deployed in healthcare environments. The vulnerability stems from CWE-285 (Improper Authorization), where the application fails to implement proper access control checks on endpoints serving Ensora eRx error logs. The affected product is identified via CPE cpe:2.3:a:openemr:openemr:*:*:*:*:*:*:*:* covering all versions through 8.0.0.3. The flaw allows privilege escalation within the application context, enabling low-privilege users to access administrative or system-level log files containing potentially sensitive healthcare transaction data, prescription information, and system configuration details that should be restricted to higher-privilege roles.

RemediationAI

No vendor-released patch identified at time of analysis according to the CVE disclosure statement. Organizations should monitor the OpenEMR security advisory at https://github.com/openemr/openemr/security/advisories/GHSA-6qg7-6jf3-xrfh for patch release announcements and apply updates immediately when available. Until patching is possible, implement compensating controls including strict user privilege review to ensure only necessary accounts have low-level access, enable comprehensive access logging for Ensora eRx error log endpoints to detect unauthorized viewing attempts, restrict network access to the OpenEMR instance to trusted IP ranges via firewall rules or VPN, and consider temporarily disabling Ensora eRx error log access features if operationally feasible. Review existing user accounts for evidence of unauthorized log access during the vulnerable period.