CVE-2026-103019 | OpenEMR up to 8.2.x REST API AuthorizationController.php userSessionLogout redirect

November 5, 2026 Yanac

A vulnerability, which was classified as problematic, was found in OpenEMR up to 8.2.x. This affects the function userSessionLogout of the file src/RestControllers/AuthorizationController.php of the component REST API. The manipulation results in open redirect.

This vulnerability is cataloged as CVE-2026-103019. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More