---
id: "CVE-2026-101500"
kind: "vulnerability"
aliases: ["CVE-2026-101500"]
title: "Oracle OPatchAuto: local high-privilege attacker can take over the tool"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["database-admins", "opatchauto", "oracle", "oracle-database", "vendor"]
not_affected_if: ["no-shared-admin-logons", "opatchauto-not-installed"]
published_at: "2026-10-20T22:17:59+00:00"
first_seen_at: "2026-10-23T21:57:22+00:00"
updated_at: "2026-10-25T03:55:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101500", "first_seen_at": "2026-10-23T21:57:22+00:00"}]
---

# Oracle OPatchAuto: local high-privilege attacker can take over the tool

Oracle OPatchAuto, the patching tool in Oracle Global Lifecycle Management, has a flaw in its Database extensions component. An attacker who already has high privileges and logon to the host where OPatchAuto runs can take over the product, and a second person must take an action for the attack to succeed.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed OPatchAuto version against the affected range `12.2.0.1.16` to `12.2.0.1.52` (unknown how to read the version from the sources)
- Confirm whether OPatchAuto is installed on hosts where Oracle Database is patched (unknown exact path from the sources)

## Fix

- Apply the Oracle Critical Patch Update fix for OPatchAuto; the fixed version is unknown from the sources
- Check the Oracle security advisory for the patched release (unknown from the sources)

## Timeline

- 2026-10-23T21:57:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101500

## From the sources

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions).  Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management OPatchAuto executes to compromise Oracle Global Lifecycle Management OPatchAuto.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management OPatchAuto. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_