Vulnerability resides in the Trace File Analyzer component of Oracle Autonomous Health Framework. Versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2 are affected. The flaw permits a local attacker, who already possesses high‑privilege access to the underlying infrastructure, to compromise the framework when a user interaction from a third party occurs. Successful exploitation can result in unauthorized deletion, creation, or modification of critical data and can also cause the framework to hang or crash repeatedly, damaging availability.

The affected systems are Oracle Autonomous Health Framework deployments, specifically the aforementioned versions: 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. These are the only versions documented as vulnerable in the current CNA data.

The CVSS v3.1 score of 7.4 reflects significant integrity and availability impacts and a Local & Low Attack Complexity vector requiring high privilege and user interaction. While the KEV listing is absent and EPSS is not reported, the requirement for a local privileged user implies that the attack surface is limited to environments where such accounts exist. Nonetheless, an attacker who can co‑opt a high‑privilege user can leverage this flaw to elevate privileges within the framework and disrupt critical health monitoring services. The scope change indicates that compromise of the framework may extend to other Oracle products connected to the same infrastructure.