Okta Hyperdrive
4 CVEs affecting Okta Hyperdrive. Latest disclosed: 2026-09-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78574 | High | 7.5 | 2026-09-08 | The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The re… |
CVE-2026-78627 | High | 7.3 | 2026-09-08 | The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the… |
CVE-2026-78629 | Medium | 5.6 | 2026-09-08 | The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. Th… |
CVE-2026-78631 | Medium | 5.3 | 2026-09-08 | The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion… |