Vulnerability · Published Sep 8, 2026 · Assigned by Okta
CVE-2026-78574Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
High 7.5
In plain English
A high-severity security flaw in Okta Hyperdrive Integration Plugin from Okta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Okta | Okta Hyperdrive Integration Plugin | 1.2.0 – before 1.5.2 |
Weakness: CWE-426 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N