CVE-2026-63194
Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93.1.
| CWE | CWE-22 |
| Vendor | bahmni |
| Product | bahmni-core |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for bahmni bahmni-core
Be the first to know when new unknown vulnerabilities affecting bahmni bahmni-core are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Bahmni / bahmni-core
= 0.93