Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-78631

Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Okta

Description

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Okta Okta Hyperdrive Agent

Default version status: unaffected

  • 1.4.0 to < 1.5.2affected

References