CVE-2026-63377

Name of the Vulnerable Software and Affected Versions TAKO AI Agent for Okta versions prior to 3.0.1-beta

Description An unauthenticated network attacker can create the first administrator account before the legitimate owner completes the initial setup. The initial setup() function only checks the is setup completion flag and does not require authentication, a bootstrap token, or network restrictions. The endpoint 'POST /api/auth/setup' in src/api/routers/auth.py invokes create auth user() with UserRole.ADMIN and set auth cookie(), which issues a valid fctr session JWT cookie. Because the application starts the listener on 0.0.0.0 and publishes port 8001 on all interfaces, non-browser HTTP clients can bypass localhost-only CORS rules. An attacker who exploits this can become the sole administrator, preventing legitimate setup and gaining the ability to read Okta-synced user data, API tokens, chat history, and application configuration, as well as modify users and Okta integration credentials.

Recommendations Update TAKO AI Agent for Okta to version 3.0.1-beta.