Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-77585

Improper Validation of SSH Target in Okta Privileged Access Client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Okta

Description

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Okta Okta Privileged Access Client

Default version status: unaffected

  • 1.59.0 to < 1.111.1affected

References