Skip to content
OpenAdvisories

Product · Okta

Okta Privileged Access Client

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-78635

    Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument

    The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework …

    Okta Okta Privileged Access Client
  • Medium 5.3
    CVE-2026-77585

    Improper Validation of SSH Target in Okta Privileged Access Client

    The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

    Okta Okta Privileged Access Client