Skip to content
OpenAdvisories
High · 8.6 CVE-2026-2123 EUVD-2026-17534GHSA-5mwg-54j5-6ch5

Privilege escalation vulnerability in Operations Agent

Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by OpenText

Description

A security audit identified a privilege escalation
vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions
Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of
Oneconsult AG for reporting this vulnerability

Affected products

VendorProductAffectedFixed
OpenText Operations Agent OA 12.22 – ≤ OA 12.29 —

References