CVE-2026-126419 · Runtime
NO FIX YET · SEE WHAT TO DO
OpenEMR's electronic signature handler checks only the caller's password, not whether they may access the patient, encounter or form. An authenticated core user can sign and lock any patient's clinical form, creating false approval records and blocking normal editing.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Any OpenEMR deployment before 8.5.0 where core users have accounts. The flaw is in the electronic signature path, so sites that do not use e-signing on forms are still exposed through the handler, but exposure requires a valid login. Sites on 8.5.0 or later are not affected.
Not affected if no-user-accounts, version-8.5.0-or-later
Who cares healthcare, openemr, self-hosted
version in the OpenEMR config or admin footer); versions below 8.5.0 are listed as affected.library/ESign/Form/Controller.php in the install and review the esign_form_submit handler.8.5.0 (fixed in releases before 8.5.0 as stated by the source)OpenEMR before 8.5.0 contains a missing authorization vulnerability in the esign_form_submit handler of library/ESign/Form/Controller.php that verifies only the caller's password, not access to the patient, encounter, or form type. Authenticated core users can supply arbitrary formId, formDir, and encounterId values to sign and lock any patient's clinical form, creating unauthorized approval records and blocking normal editing.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.