What is GHSA-85p4-grr3-gp5m?

GHSA-85p4-grr3-gp5m is a security advisory published by GitHub Security Advisories with Medium severity. OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR...

Which CVE IDs does GHSA-85p4-grr3-gp5m cover?

GHSA-85p4-grr3-gp5m covers the following CVE IDs: CVE-2026-124451. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-85p4-grr3-gp5m?

GHSA-85p4-grr3-gp5m has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-85p4-grr3-gp5mMediumCVSS 5.3

OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR...

Vendor

GitHub Security Advisories

Published

November 8, 2026

Last Modified

November 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-124451 →

📋 Description

OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR implementation because checkUserHasAccessToPatient() in BearerTokenAuthorizationStrategy.php unconditionally returns true. Authenticated users or malicious SMART apps can manipulate token launch context to bind requests to arbitrary patient UUIDs, gaining unauthorized read/write access to other patients' FHIR resources.

🔗 References (4)

https://github.com/openemr/openemr/security/advisories/GHSA-xjgw-qjm5-4mq6
https://nvd.nist.gov/vuln/detail/CVE-2026-124451
https://www.vulncheck.com/advisories/openemr-before-8.4.0-authorization-bypass-via-checkuserhasaccesstopatient-in-smart-on-fhir
https://github.com/advisories/GHSA-85p4-grr3-gp5m