Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-2123

Privilege escalation vulnerability in Operations Agent

Description

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText Operations Agent

Default version status: unaffected

  • OA 12.22 to ≤ OA 12.29affected

References