CVE-2026-33918

OpenEMR (prior to v8.0.0.3) has a permission flaw in the billing file-download endpoint interface/billing/get_claim_file.php where the endpoint only validates a valid session and CSRF token but does not enforce ACLs. This allowed any authenticated OpenEMR user, regardless of billing privileges, t...