Vulnerability Details CVE-2026-78631
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.0%
CVSS Severity
CVSS v3 Score 5.3