Vulnerability · Published Sep 8, 2026 · Assigned by Okta
CVE-2026-78631Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
Medium 5.3
In plain English
A medium-severity sensitive data in logs in Okta Hyperdrive Agent from Okta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.1%top 96.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Okta | Okta Hyperdrive Agent | 1.4.0 – before 1.5.2 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N