CVE-2026-78550 — Improper Input Handling in Okta Access Gateway Management Console Exception Handler

CVE-2026-78550

Improper Input Handling in Okta Access Gateway Management Console Exception Handler PUBLISHED

Description (CNA)

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.

Affected (CNA)

Vendor / product	Versions
Okta / Okta Access Gateway	affected 0 before 2026.9.1

CWE

CWE-95

References

https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-exception-handler-cve-2026-78550

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.