EUVD-2026-13158Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionGitHub Advisory
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the backup functionality. Version 8.0.0.2 fixes the issue.
AnalysisAI
Command injection in OpenEMR's backup functionality (versions prior to 8.0.0.2) allows authenticated high-privilege users to execute arbitrary commands on the underlying system due to insufficient input validation. The CVSS 9.1 critical rating reflects the potential for complete system compromise, though exploitation requires valid administrative credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires authenticated access with high-privilege role (administrator or backup user) in OpenEMR versions prior to 8.0.0.2. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | While the CVSS 9.1 score indicates critical severity due to high impact across confidentiality, integrity, and availability with scope change, the real-world risk is moderated by the requirement for high privileges (PR:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has compromised or obtained high-privilege credentials to an OpenEMR installation could navigate to the backup functionality and inject malicious commands through unvalidated input fields. These commands would execute with the web server's privileges, potentially allowing the attacker to access sensitive patient data, modify health records, or pivot to other systems on the network. … |
| Remediation | Upgrade OpenEMR to version 8.0.0.2 or later, which contains the security fix documented in commit 7bc7bd077a624e205daed17658de41af6070ef73 (https://github.com/openemr/openemr/commit/7bc7bd077a624e205daed17658de41af6070ef73). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all OpenEMR installations and their versions (check /var/www/openemr or equivalent; query database for version info). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today