A flaw in the dated reminders log of OpenEMR allows an authenticated user without administrative privileges to access reminder data belonging to other users. By crafting a query that includes arbitrary user identifiers in the sentTo[] or sentBy[] parameters, a user can retrieve patient names, free‑text messages, and other sensitive information. This constitutes a confidentiality breach and exposes private health data.

The vulnerability affects OpenEMR versions earlier than 8.0.0.2. Users running these versions on any platform are susceptible; the fix is available in OpenEMR 8.0.0.2 and later releases.

The CVSS v3 score of 6.5 reflects medium severity, while the EPSS score indicates an exploitation probability below 1%. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires remote access to the web interface and authentication of a non‑admin account; no special privileges beyond normal user access are needed to construct the malicious GET request.