What’s Vulnerable › Vulnerabilities

CVE-2026-67611: OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-08-03 · updated 2026-09-01
• Weakness: CWE-308

Description

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAuth2 client via the unauthenticated registration endpoint and use the password grant to exchange credentials for an API access token, bypassing the normal web interface authentication and any enforced multi-factor authentication controls.

Affected products

• openemr: through 8.2.0

References

• https://jivasecurity.com/writeups/openemr-preauth-disclosure-password-grant
• https://www.vulncheck.com/advisories/openemr-oauth2-password-grant-authentication-bypass-via-smart-configuration

Get alerted when CVE-2026-67611 or the next vulnerability affects your stack