What is CVE-2026-78574?

CVE-2026-78574 is a high-severity vulnerability in Okta Hyperdrive Integration Plugin, classified under Untrusted Search Path. CVSS score: 7.5/10. Published 2026-09-08.

How severe is CVE-2026-78574?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Okta Hyperdrive Integration Plugin

CVE-2026-78574

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N.

Affected products

Okta Hyperdrive Integration Plugin

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

psirt@okta.com

Frequently asked questions

What is CVE-2026-78574?: CVE-2026-78574 is a high-severity vulnerability in Okta Hyperdrive Integration Plugin, classified under Untrusted Search Path. CVSS score: 7.5/10. Published 2026-09-08.
How severe is CVE-2026-78574?: High severity. CVSS v3 base score is 7.5 out of 10.