CVE-2026-63378

Name of the Vulnerable Software and Affected Versions TAKO AI Agent for Okta versions prior to 3.0.1-beta

Description Authenticated users with a valid fctr session cookie can execute arbitrary Python code without administrator privileges. By sending a request to the 'POST /api/react/execute-script' endpoint using the script code parameter, an attacker can bypass AI-based content filtering and security validation. The validation process in validate generated code() fails to properly handle ast.Call targets and allows getattr via ALLOWED BUILTINS, enabling dynamic call chains through builtins to evade detection. The code is written to disk by write temp script() and executed as the root user via asyncio.create subprocess exec(). Execution results are returned through the 'GET /api/react/stream-react-updates?process id=' endpoint. This can lead to full container compromise, disclosure of Okta API tokens and JWT keys, exposure of the SQLite database, and unauthorized backend-service pivoting.

Recommendations Update TAKO AI Agent for Okta to version 3.0.1-beta. As a temporary workaround, restrict access to the 'POST /api/react/execute-script' endpoint.