Vulnerability exists in the AHF Instant Diagnostic Replay component of Oracle Autonomous Health Framework. A low‑privileged attacker with logon access to the infrastructure where the framework runs can exploit this weakness to gain full control of the framework. Compromise results in loss of confidentiality, integrity, and availability, effectively allowing an attacker to take complete control of the service. The weakness is defined in the CVSS vector as AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H.

Oracle Autonomous Health Framework versions 26.3 through 26.8 are affected. Any deployment of these versions that allows local logon to the underlying infrastructure is vulnerable. The product is named Autonomous Health Framework from Oracle Corporation.

With a CVSS Base Score of 7.8 the risk is considered high. The vector indicates local attacker access, low attack complexity, and low privileges, meaning the vulnerability is easy to exploit in an environment where the attacker can log on. EPSS is not available, and the vulnerability is not listed in CISA KEV. However, because the impact is full application takeover, administrators should treat it as a high‑priority issue and consider the likelihood of exploitation as significant in environments where local access is not tightly controlled.