An unauthenticated web endpoint in CGM CLININET lets anyone on an adjacent network list and download patient documents. That is one of 11 vulnerabilities in the software that CERT Polska disclosed on October 23 after coordinating their disclosure with the vendor. Researcher Maciej Kazulak reported ten of the 11.
CLININET handles patient documents and HL7 messages, the standard format clinical systems use to exchange data such as lab results and admissions. Most of the flaws require an attacker to already be on, or next to, the network the server sits on, but several of them end with code running as root, the most powerful account on the server.
Root on the server from the local network
The four highest-rated flaws, in order of severity:
- CVE-2025-30047 (CVSS 9.4): an administrative HTTP API exchanges Java serialized objects, and a crafted object sent from the same local network runs code as root. Fixed in 2026.MS3.
- CVE-2025-30050 (CVSS 9.4): the RunCGI.pm component imports whatever module a query parameter names, so an attacker on an adjacent network can execute code as root. Fixed in 2026.MS3.
- CVE-2025-30054 (CVSS 9.3): the HL7 processing service runs as root, but its scripts and configuration can be modified by the uhcapache user, a local path to root.
- CVE-2025-30046 (CVSS 9.0): several HL7 communication processes run as root while handling untrusted data from external systems, allowing remote code execution as root for anyone able to send them data.
No CVSS scores are yet published for the other seven in the NVD data we track. They include CVE-2025-30043, the patient document exposure in the /DocManagment path; CVE-2025-30045, a Perl code injection in the ConvExpr function that a high-privileged user can turn into root code execution; CVE-2025-30049, user passwords stored as unsalted MD5 hashes; CVE-2025-30051, production database and RabbitMQ credentials in a configuration file readable by any local account; CVE-2025-30052, an rsyncd service that trusts the client's source IP address, so a spoofed address can edit files; CVE-2025-30053, a cgm-updater process listening on an open port with no authentication; and CVE-2025-58403, a reflected cross-site scripting bug that can steal session cookies.
2026.MS3 fixes five, six are still open
CERT Polska says CVE-2025-30043, 30047, 30049, 30050 and 30051 are fixed in version 2026.MS3 (30049 also in 2026.MS1). The other six, CVE-2025-30045, 30046, 30052, 30053, 30054 and 58403, are confirmed to affect versions up to 2026.MS3, and CERT Polska warns later versions may also be vulnerable. Operators should upgrade to 2026.MS3, ask CGM about fixes for the remainder, and in the meantime restrict which hosts can reach the HL7 interfaces, the rsyncd service, the cgm-updater port and the administrative API. Given the unsalted password hashes and the readable configuration file, resetting user passwords and rotating database and RabbitMQ credentials after upgrading is prudent.
Hospital networks are often flatter than they should be, which is exactly why a list of "adjacent network" bugs in a clinical system deserves more urgency than the phrase suggests. CERT Polska, Poland's national CERT, coordinated the disclosure.
This briefing is provided by IntelFusions for informational and defensive purposes only. It is based on sources assessed to be reliable at the time of writing, and analytic judgments carry the confidence levels indicated. Indicators of compromise are defanged; re-arm them only in controlled environments. IntelFusions is not affiliated with the organizations named and makes no warranty as to completeness or accuracy.