Skip to content
OpenAdvisories

Product · Okta

Okta Hyperdrive Agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-78631

    Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

    The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential re…

    Okta Okta Hyperdrive Agent
  • Medium 5.6
    CVE-2026-78629

    Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling

    The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulti…

    Okta Okta Hyperdrive Agent