{"id":"CVE-2026-75525","kind":"vulnerability","aliases":["CVE-2026-75525"],"related":[],"title":"OpenReception: unauthenticated users can add encryption keys to staff directory","description":"OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. The product's design guarantees that appointment data is end-to-end encrypted to staff members and that the staff recipient directory is not attacker-writable, so that even administrators and the operator cannot read patient data. This endpoint breaks that guarantee for an unauthenticated remote actor: it allows writing an arbitrary encryption recipient into the recipient directory of any tenant. The injected key receives the tunnel key of every appointment booked afterward in that tenant, because booking clients encrypt to all active staff keys. The attacker holds the corresponding secret key and is a persistent, unauthorized recipient of that key material. At time of publication, there are no publicly available patches.","summary":"OpenReception's appointment booking software, in versions 2.1.0 and earlier, lets an unauthenticated attacker store their own ML-KEM-768 public key under any existing staff user in any tenant. Future appointment data in that tenant is then encrypted to the attacker's key, so the attacker can read patient booking data.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["appointment-booking","healthcare","openreception","package","self-hosted"],"not_affected_if":["not-running-openreception","patched-version"],"how_to_check":"- Check whether the installed OpenReception version is `2.1.0` or earlier\n- Look for the staff-crypto recipient directory endpoint in the deployment and confirm whether it accepts unauthenticated writes (unknown from sources)","fix":"- No patched version is available at time of publication (unknown from sources)\n- Restrict or block access to the staff recipient directory write endpoint at the proxy or firewall until a patch ships\n- Rotate staff encryption keys and review recipient lists for keys that were not added by staff","status":"open","published_at":"2026-10-23T21:17:25+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","triaged_at":"2026-10-25T04:18:48+00:00","updated_at":"2026-10-25T04:18:48+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:18:48Z","model":"claude-haiku-5-5","output":{"fix":"- No patched version is available at time of publication (unknown from sources)\n- Restrict or block access to the staff recipient directory write endpoint at the proxy or firewall until a patch ships\n- Rotate staff encryption keys and review recipient lists for keys that were not added by staff","reach":"internet","title":"OpenReception: unauthenticated users can add encryption keys to staff directory","impact":"medium","summary":"OpenReception's appointment booking software, in versions 2.1.0 and earlier, lets an unauthenticated attacker store their own ML-KEM-768 public key under any existing staff user in any tenant. Future appointment data in that tenant is then encrypted to the attacker's key, so the attacker can read patient booking data.","category":"package","nicknames":[],"who_cares":["openreception","self-hosted","healthcare","appointment-booking"],"confidence":0.6,"needs_auth":"no","worst_case":"attacker reads future appointment data encrypted to injected key","analyst_note":"Confirm the affected endpoint path, whether a patch exists, and the fixed version from the NVD entry and vendor advisory.","how_to_check":"- Check whether the installed OpenReception version is `2.1.0` or earlier\n- Look for the staff-crypto recipient directory endpoint in the deployment and confirm whether it accepts unauthenticated writes (unknown from sources)","needs_analyst":true,"not_affected_if":["not-running-openreception","patched-version"],"who_is_affected":"Operators running OpenReception 2.1.0 or earlier that expose the booking platform to the internet or untrusted networks. The flaw is in the unauthenticated write path to the recipient directory, so deployments behind strict network access controls are less exposed. Teams not running OpenReception can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000677,"input_tokens":3527,"output_tokens":648,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-75525':13A,16A '2.1.0':33B,96C '768':46B,109C 'activ':211C 'actor':175C 'add':5A 'administr':158C 'afterward':201C 'allow':177C 'appoint':18B,28B,58B,81C,91C,133C,199C 'appointment-book':17B 'arbitrari':105C,180C 'attack':39B,68B,73B,101C,153C,215C 'attacker-writ':152C 'avail':239C 'book':19B,29B,77B,82C,92C,200C,206C 'break':168C 'cannot':162C 'client':207C 'correspond':218C 'crypto':124C 'cve':11A,14A 'data':59B,78B,134C,165C 'design':130C 'directori':10A,126C,149C,186C 'earlier':35B 'encrypt':6A,65B,90C,140C,181C,208C 'end':87C,89C,137C,139C 'end-to-end':86C,136C 'endpoint':167C 'even':157C 'everi':198C 'exist':51B,114C 'futur':57B 'guarante':131C,170C 'healthcar':20B 'hold':216C 'host':25B 'ident':117C 'inject':191C 'kem':45B,108C 'key':7A,48B,70B,111C,192C,196C,213C,220C,229C 'let':36B 'materi':230C 'member':143C 'ml':44B,107C 'ml-kem':43B,106C 'openrecept':1A,21B,26B,79C 'oper':161C 'packag':22B 'patch':240C 'patient':76B,164C 'persist':224C 'platform':93C 'prior':98C 'product':128C 'provid':84C 'public':47B,110C,234C,238C 'read':75B,163C 'receiv':193C 'recipi':125C,148C,182C,185C,226C 'remot':174C 'secret':219C 'self':24B 'self-host':23B 'softwar':30B,83C 'staff':9A,52B,123C,142C,147C,212C 'staff-crypto':122C 'store':40B,103C 'tenant':56B,62B,120C,189C,204C 'time':232C 'tunnel':195C 'unauthent':2A,38B,100C,173C 'unauthor':225C 'user':3A,53B,115C 'version':32B,95C 'writabl':154C 'write':178C","nicknames":[],"mitigations":[],"who_affected":"Operators running OpenReception 2.1.0 or earlier that expose the booking platform to the internet or untrusted networks. The flaw is in the unauthenticated write path to the recipient directory, so deployments behind strict network access controls are less exposed. Teams not running OpenReception can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T21:17:25+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-75525","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75525","severity":null,"published_at":"2026-10-23T21:17:25+00:00","modified_at":"2026-10-23T21:17:25+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}