This vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) affects versions 26, 26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. It is easily exploitable by a high privileged attacker with logon access to the infrastructure where the framework runs, requiring human interaction from a different user. Exploitation can result in unauthorized creation, deletion, or modification of critical data within the framework and cause a hang or frequent crashes leading to denial of service. The scope of impact may extend to additional Oracle products. The CVSS vector is AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H, reflecting local attack vector, low complexity, high privileges required, user interaction needed, scope change, no confidentiality impact, but high integrity and availability impacts.

The vulnerability allows unauthorized modification or deletion of critical data within Oracle Autonomous Health Framework and can cause denial of service by crashing or hanging the framework. The attack requires a high privileged user with logon access and human interaction from another user, but successful exploitation may affect additional Oracle products due to scope change. There is no confidentiality impact reported.

Oracle has released security patches addressing this vulnerability as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly and remain on actively supported versions. No indication was given that the vulnerability is already mitigated or requires no action. Patch availability details are provided in the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html.