Skip to content
OpenAdvisories

Vendor

fctr-id

2 known vulnerabilities.

Products

okta-ai-agent 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-63377

    TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

    TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, `POST /api/auth/setup` in `src/api/routers/auth.py` allows an unauthenticated network attacker to create the first a…

    fctr-id okta-ai-agent