CVE-2026-77585Improper Validation of SSH Target in Okta Privileged Access Client

Beschreibung

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://trust.okta.com/security-advisories/improper-validation-ssh-target-in-okta-privileged-access-client-cv…