CVE-2026-2123 — Privilege escalation vulnerability in Operations Agent

CVE-2026-2123

Privilege escalation vulnerability in Operations Agent PUBLISHED

Description (CNA)

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability

Affected (CNA)

Vendor / product	Versions
OpenText / Operations Agent	affected OA 12.22 through OA 12.29

CWE

CWE-280

References

https://portal.microfocus.com/s/article/KM000046068

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.