Skip to content
OpenAdvisories

Vendor

fctr-id

2 known vulnerabilities.

Products

okta-ai-agent 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-63378

    TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

    TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid `fctr_session` cookie can submit arbitrary Python source in the `script_code` fi…

    fctr-id okta-ai-agent