PT-2026-88441 · Okta · Okta Hyperdrive Agent
CVE-2026-78631
·
Published
2026-09-08
·
Updated
2026-09-08
CVSS v3.1
5.3
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N |
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Okta Hyperdrive Agent