CVE-2026-2123: Privilege escalation vulnerability in Operations Agent
A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenText iTO Operations Agent (Windows)to a version that resolves this vulnerability.Fixed in <=OA 12.29 - Compensating control
Before applying the hotfix, mitigate by preventing the Operations Agent from running executables from specific writable locations (per the readme.txt included in the hotfix zip).
- Operational
Follow the install instructions in readme.txt included in the Operations Agent hotfix zip file downloaded from the Marketplace for the OA versions mentioned in the material.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2123?
CVE-2026-2123 is considered a privilege escalation vulnerability.
How do I fix CVE-2026-2123?
To mitigate CVE-2026-2123, upgrade Operations Agent to a version newer than 12.29.
What can exploit CVE-2026-2123?
CVE-2026-2123 can be exploited by malicious executables running from specific writable locations.
Which versions of Operations Agent are affected by CVE-2026-2123?
Operations Agent versions up to and including 12.29 are affected by CVE-2026-2123.
What is the primary impact of CVE-2026-2123?
The primary impact of CVE-2026-2123 is unauthorized privilege escalation.