A vulnerability, which was classified as problematic, has been found in OpenEMR up to 8.0.0.2. This issue affects some unknown processing of the component Encounter Vitals API. This manipulation causes authorization bypass.

This vulnerability is handled as CVE-2026-25744. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.