Skip to content
OpenAdvisories

Product · Okta

Okta RADIUS Agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-78633

    Denial of Service in Okta RADIUS Agent Packet Parser

    The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication req…

    Okta Okta RADIUS Agent
  • Medium 5.3
    CVE-2026-78632

    Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

    The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local servi…

    Okta Okta RADIUS Agent