CVE-2026-103019

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, userSessionLogout() in src/RestControllers/AuthorizationController.php uses decodeToken() to process an id_token_hint without verifying its signature and, when the referenced trusted session is absent, redirects to the caller-supplied post_logout_redirect_uri before validating it against the client's registered redirect URIs. An unauthenticated attacker can craft a logout link that sends a user to an arbitrary external site and invalidates the user's session, enabling convincing phishing flows from the legitimate logout endpoint. The endpoint is reachable when the OpenEMR REST API is enabled. This issue is fixed in version 8.3.0.

• CWE-601

• https://github.com/openemr/openemr/commit/50f789fad45ada625fe8d0faf0c7a9c15ef52aa5
• https://github.com/openemr/openemr/pull/13133
• https://github.com/openemr/openemr/releases/tag/v8_3_0
• https://github.com/openemr/openemr/security/advisories/GHSA-5h9g-m7q2-pv45

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-103008Uncontrolled Recursion (CWE-674) in Elasticsearch can lead t…6.5
• CVE-2026-103009Authorization Bypass Through User-Controlled Key (CWE-639) i…7.1
• CVE-2026-10301A vulnerability was detected in itsourcecode Fees Management…4.3
• CVE-2026-103010Heap-based buffer overflow in the legacy Blowfish decryption…7.8
• CVE-2026-103011Heap-based buffer overflow in the legacy Blowfish encryption…6.5
• CVE-2026-103012Claude Code selected an API key stored by Claude Code, for e…2
• CVE-2026-10302A flaw has been found in itsourcecode Fees Management System…6.3
• CVE-2026-103020OpenEMR is a free and open source electronic health records …5.3
• CVE-2026-103021OpenEMR is a free and open source electronic health records …5.3
• CVE-2026-103028SFTPGo is an open source, event-driven file transfer solutio…4.3
• CVE-2026-10303In ServerCo getssl version 2.49 and prior, the ACME challeng…7.4
• CVE-2026-103030Dio is a powerful HTTP client for Dart and Flutter. From 1.0…7.5