Bahmni vulnerabilities
We track 2 vulnerabilities in Bahmni products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Bahmni vulnerabilities
- 8.7 High severity
bahmni-core: Improper Limitation of a Pathname to a Restricted Directory
OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This
- 7.1 High severity
bahmni-core: Improper Neutralization of Special Elements used in an SQL Command
OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, an attacker with authenticated access could potentially exfiltrate sensitive data from the database. This issue has been patched in ve