Security Flaw in OpenText Agents Affects Endpoint Investigator and Forensics Solutions
CVE-2026-75120

9.3CRITICAL

Key Information:

Vendor

Opentext
Status
Endpoint Investigator
Endpoint Forensics & Response
Information Assurance
Endpoint Security
Vendor
CVE Published:
13 October 2026

What is CVE-2026-75120?

The OpenText™ Agents component features a vulnerability that may allow unauthorized access by bypassing essential security measures during session initialization. This could potentially enable an attacker to connect to a vulnerable Agent without proper authentication, posing significant security risks to users of OpenText solutions such as Endpoint Investigator, Endpoint Forensics & Response, Information Assurance, and Endpoint Security.

Affected Version(s)

Endpoint Forensics & Response 0 <= 26.1

Endpoint Investigator 0 <= 26.1

Endpoint Security 0 <= 24.1

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Petros Koutroumpis and the JPMC XOR team
.