---
id: "CVE-2026-113874"
kind: "vulnerability"
aliases: ["CVE-2026-113874"]
title: "SmileCDR HAPI FHIR: bundle body can switch tenant partitions"
severity: "high"
cvss: 8.6
epss: 0.00258
exploited: false
status: "open"
category: "package"
products: [{"name": "HAPI FHIR", "fixed": [], "affected": ">= 8.2.0 (CISA lists all versions)", "ecosystem": "maven"}]
ecosystems: ["maven"]
tags: ["hapi-fhir", "healthcare", "java", "multi-tenant", "package", "partitioning", "self-hosted", "smilecdr"]
not_affected_if: ["entitlement-hook-registered", "partitioning-disabled", "single-tenant-deployment"]
published_at: "2026-10-22T18:17:27+00:00"
first_seen_at: "2026-10-23T21:57:31+00:00"
updated_at: "2026-10-25T12:38:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113874", "first_seen_at": "2026-10-23T21:57:31+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T23:40:50+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-113874", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# SmileCDR HAPI FHIR: bundle body can switch tenant partitions

A caller authorized for one tenant can put the request-partition-ids extension on a transaction/batch Bundle entry and override the trusted X-Request-Partition-IDs header, reading from or writing to another tenant's partition. HAPI FHIR ships no entitlement check by default, so it is exploitable unless you register one. No fix exists yet (CISA: all versions affected).

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- maven:HAPI FHIR affected >= 8.2.0 (CISA lists all versions) fixed ?

## How to check

You are exposed if you run HAPI FHIR (>= 8.2.0, where the extension handler first shipped; Smile CDR 2026.05.R01 is based on 8.10.0) with partitioning enabled, RequestHeaderPartitionInterceptor behind an authenticating gateway, and no STORAGE_PARTITION_SELECTED hook that checks the caller's entitlement. Test: send a batch Bundle whose entry.request carries the extension http://hapifhir.io/fhir/ns/StructureDefinition/request-partition-ids naming another partition; if the GET returns foreign data you are exposed.

## Fix

No fixed version as of 2026-10-22. Mitigation (from the reporter's control test): register a STORAGE_PARTITION_SELECTED interceptor that verifies the caller may access the final partition. Or strip or reject that extension on Bundle.entry.request at the gateway. Watch for a HAPI FHIR release after 8.12.1 and Smile CDR notes.

## Timeline

- 2026-10-23T21:57:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113874
- 2026-10-23T23:40:50+00:00 analyst — Read CISA CSAF VA-26-294-01 and reporter's oss-security post: all versions affected, no fix as of 2026-10-22; PoC public (JUnit, reporter's writeup); no exploitation reported. Not a Smile CDR-published advisory; Smile CDR not tested. Social search not done.
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-113874

## Documents

- [advisory] CISA CSAF VA-26-294-01 (HAPI FHIR, VU#394579) https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-294-01.json
- [poc] oss-security: HAPI FHIR cross-tenant partition override (Abhinav Agarwal) https://www.openwall.com/lists/oss-security/2026/10/22/34

## From the sources

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_