CVE-2026-78631

Name of the Vulnerable Software and Affected Versions Okta Hyperdrive Agent (affected versions not specified)

Description The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level following every successful MFA completion. This behavior allows any local user with access to the log file to read live authentication credentials. A SAML bearer assertion is a security token used to prove a user's identity to a service provider.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.