MEDIUM 5.3 NVD

CVE-2026-78631

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion.

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

References

https://trust.okta.com/security-advisories/improper-restriction-of-sensitive-information-i

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-08 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.