CVE-2026-77585 — Improper Validation of SSH Target in Okta Privileged Access Client

CVE-2026-77585

Improper Validation of SSH Target in Okta Privileged Access Client PUBLISHED

Description (CNA)

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

Affected (CNA)

Vendor / product	Versions
Okta / Okta Privileged Access Client	affected 1.59.0 before 1.111.1

CWE

CWE-78

References

https://trust.okta.com/security-advisories/improper-validation-ssh-target-in-okta-privileged-access-client-cve-2026-77585

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.