A vulnerability exists in the Trace File Analyzer component of Oracle Autonomous Health Framework that can be exploited by an attacker who has any level of local logon access. Successful exploitation allows that attacker to fully compromise the framework, resulting in loss of confidentiality, integrity, and availability for all data and services managed by the framework. The CVSS 3.1 score of 7.8 indicates a high severity with local attack, low complexity, and low privileges required for exploitation.

The vulnerability affects Oracle Autonomous Health Framework versions 26.3 through 26.8, which are typically deployed on the infrastructure where the framework executes. Administrators should verify that any of these versions are in use within their environment.

With an attack vector of local access and a low attack complexity, an attacker who can authenticate to the infrastructure can mount this vulnerability without requiring remote network exposure. The EPSS score is not available, but the lack of a KEV listing indicates it has not yet been reported as a known exploited vulnerability. Nevertheless, the high CVSS score and local privilege escalation nature make it a significant risk for environments running the affected framework.