LibreHealth EHR is a free and open source electronic health record and medical practice management application. LibreHealth EHR 2.0.0 contains a file upload vulnerability that could be exploited by attackers to achieve remote code execution (RCE) on a hosted web server by uploading a maliciously crafted image.