CVE-2026-78631 — Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

CVE-2026-78631

Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging PUBLISHED

Description (CNA)

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

Affected (CNA)

Vendor / product	Versions
Okta / Okta Hyperdrive Agent	affected 1.4.0 before 1.5.2

CWE

CWE-532

References

https://trust.okta.com/security-advisories/improper-restriction-of-sensitive-information-in-okta-hyperdrive-agent-logging-cve-2026-78631

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.