EUVD-2026-106743
GHSA-2q8w-2g5h-v4cq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with DBMS_VECTOR-privileged account
-
DeliveryConnect over Oracle Net
-
ExploitInvoke crafted DBMS_VECTOR operation
-
ExecutionEscalate within RDBMS
-
ImpactFull database takeover
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V8 - Authorization Least privilege enforcement
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an existing Oracle Database account that has been granted the DBMS_VECTOR privilege (part of the Oracle AI Vector Search feature in Database 23ai), plus network reachability to the database listener over Oracle Net. Affected deployments are limited to RDBMS versions 23.4.0 through 23.26.3; earlier release trains are not listed as vulnerable. The primary limiting factor is the DBMS_VECTOR privilege grant - environments that do not use vector search or that restrict this privilege are not exploitable by arbitrary low-privileged users; no user interaction or elevated/DBA privileges are otherwise needed. |
| Impact | This is a credible high-priority issue for Oracle Database 23ai operators, though not a top-tier emergency in the absence of exploitation signals. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) describes a network-reachable, low-complexity attack requiring only low privileges and no user interaction, yielding full confidentiality, integrity, and availability compromise ('takeover of RDBMS'). The key gating factor is PR:L: the attacker must already hold a database account that has been granted the DBMS_VECTOR privilege, which meaningfully narrows the exploit population versus a true unauthenticated flaw. No EPSS score, CISA KEV listing, or public POC is present in the provided data, so there is no public exploit identified at time of analysis and no evidence of active exploitation. Signals are therefore consistent rather than conflicting: a high technical-impact, easily exploitable flaw whose real-world weaponization is currently unproven. Note the input 'Information Disclosure' tag understates the impact - the description and CVSS both indicate full takeover (C:H/I:H/A:H), not mere disclosure - so prioritization should treat this as privilege-escalation-to-takeover, not a read-only leak. |
| Exploit ScenarioDerived | An attacker who already holds a low-privileged Oracle Database account granted the DBMS_VECTOR privilege connects over Oracle Net and sends crafted calls that abuse the RDBMS vector component, escalating to full control of the database. Because attack complexity is low and no user interaction is required, a single authenticated session is sufficient. No public exploit code is identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 20, 2026
Privilege escalation in Oracle Database 23ai (versions 23.4.0 through 23.26.3) allows a low-privileged database account holding the DBMS_VECTOR privilege to take over the RDBMS over Oracle Net, with full confidentiality, integrity, and availability impact (CVSS 3.1 base score 8.8). The attack is network-reachable and requires no user interaction, but is gated by the DBMS_VECTOR grant that ships with the Oracle AI Vector Search feature, so environments that do not use vector search or that tightly control this privilege are not exposed to arbitrary low-privileged users. No public exploit code has been identified and the flaw is not listed in CISA KEV at time of analysis; Oracle disclosed it in its October 2026 Critical Patch Update.
RemediationAI
Apply the October 2026 Oracle Critical Patch Update, which is the vendor fix referenced in the advisory at https://www.oracle.com/security-alerts/cpuoct2026.html, moving the instance beyond 23.26.3; Oracle CPU patches are cumulative, so apply the full CPU/PSU bundle rather than an isolated one-off. If the patch cannot be staged immediately, revoke the DBMS_VECTOR grant from all accounts that do not strictly require vector search functionality - this removes the prerequisite for exploitation but breaks AI Vector Search workloads (embedding generation, vector index operations) for those users. As a secondary control, restrict Oracle Net access to the listener through firewall rules, listener ACLs, or connection-manager allowlists so only trusted application subnets can reach the database; this reduces exposure to remote attackers but has the trade-off of disrupting legitimate clients connecting from outside the permitted ranges. Review grants to DBMS_VECTOR and other network-capable PL/SQL packages as part of routine privilege hygiene, since the vulnerability is only reachable by accounts holding that privilege.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue sits in the RDBMS component of Oracle Database Server and is reachable through the Oracle Net listener (typically TCP 1521), the same protocol used by ordinary SQL*Net clients. The prerequisite DBMS_VECTOR privilege is the PL/SQL package introduced with Oracle AI Vector Search in Database 23ai, which exposes vector storage, vector index management, embedding generation, and related helper routines to non-DBA users; because the package operates with elevated internal access to memory, file, and network resources, an insufficient privilege or input-validation boundary inside it lets a holder of that grant escape the intended low-privilege context. Oracle did not publish a CWE mapping for this CPU entry, so the precise root-cause class is undisclosed, but the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) describes a low-complexity, authenticated network attack that yields complete compromise of the database instance rather than of the host OS. Version exposure is narrowly scoped to the 23ai release train from 23.4.0 to 23.26.3; earlier release trains are not listed in the advisory.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Remote via Oracle Net (AV:N), easily exploitable (AC:L), requires a DBMS_VECTOR-privileged account so PR:L, no user interaction, and full takeover gives C/I/A:H.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
DescriptionCVE.org
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Executive ViewAI
Oracle Database 23ai versions 23.4.0 through 23.26.3 contain a high-severity privilege escalation flaw that lets a low-privileged database account with the DBMS_VECTOR privilege take full control of the RDBMS over Oracle Net, affecting confidentiality, integrity, and availability. Organizations using Oracle AI Vector Search or broadly granting DBMS_VECTOR are most exposed; leadership should prioritize privilege inventory and network restrictions because no public exploit identified at time of analysis, but a compromised database could have significant business consequences.
No vendor-released patch identified at time of analysis. Interim mitigations include revoking DBMS_VECTOR from all accounts that do not require Oracle AI Vector Search, restricting Oracle Net access to trusted hosts through network ACLs or firewall rules, enforcing least privilege and monitoring for privilege changes, and disabling or avoiding the vector search feature where unused; apply the vendor patch when released.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
Exploit-DB