CVE-2026-67611
Received Received - Intake

Authentication Bypass in OpenEMR via OAuth2 Password Grant

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulnCheck

Description
OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAuth2 client via the unauthenticated registration endpoint and use the password grant to exchange credentials for an API access token, bypassing the normal web interface authentication and any enforced multi-factor authentication controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-67611
EUVD
EUVD-2026-52348

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openemr openemr to 8.2.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-308 The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenEMR through version 8.2.0 has an authentication bypass flaw. Attackers with valid credentials can bypass multi-factor authentication by exploiting an exposed OAuth2 password grant flow. They register an OAuth2 client via an unauthenticated endpoint and use the password grant to get an API access token, avoiding normal web interface authentication and any enforced multi-factor authentication.

Detection Guidance

Check for unauthorized OAuth2 client registrations by inspecting the OpenEMR client registration endpoint logs or database entries. Look for POST requests to /oauth2/register or similar endpoints without authentication. Verify if any clients were registered via unauthenticated requests.

Impact Analysis

This vulnerability allows attackers to gain unauthorized access to OpenEMR systems even if multi-factor authentication is enabled. They could access sensitive patient or organizational data, perform unauthorized actions, or escalate privileges within the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by allowing unauthorized access to protected health information. It undermines security controls required by these regulations, potentially resulting in data breaches and legal penalties.

Mitigation Strategies

Disable the unauthenticated OAuth2 client registration endpoint in OpenEMR. Update OpenEMR to the latest version that patches this vulnerability. Review and revoke any unauthorized OAuth2 clients that may have been registered. Enforce strict access controls on OAuth2 endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67611. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart