CVE-2026-33301: OpenEMR has arbitrary image file read via PDF generator
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the Notes - my encounters role can fill Eye Exam forms in patient encounters. The answers to the form can be printed out in PDF form. An arbitrary file read vulnerability was identified in the PDF creation function where the form answers are parsed as unescaped HTML, allowing an attacker to include arbitrary image files from the server in the generated PDF. Version 8.0.0.2 fixes the issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33301?
CVE-2026-33301 is classified as medium severity due to the potential for unauthorized access to arbitrary image files.
How do I fix CVE-2026-33301?
To address CVE-2026-33301, upgrade OpenEMR to version 8.0.0.2 or later, which includes the necessary security patches.
Who is affected by CVE-2026-33301?
Users with the 'Notes - my encounters' role in OpenEMR versions prior to 8.0.0.2 are affected by CVE-2026-33301.
What types of data are at risk with CVE-2026-33301?
CVE-2026-33301 can lead to unauthorized reading of image files associated with eye exam forms in patient encounters.
Is there a workaround for CVE-2026-33301 before upgrading?
There are no recommended workarounds for CVE-2026-33301; upgrading to the fixed version is necessary for protection.