CVE-2026-78631Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

Descripción

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://trust.okta.com/security-advisories/improper-restriction-of-sensitive-information-in-okta-hyperdrive-a… Vendor Advisory