Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging CVE-2026-78631 - Sep 8, 2026

Description

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

Affected product and versions

Customers using the Okta Hyperdrive Agent versions 1.4.0 through 1.5.1 are affected.

Customer Recommendations

To remediate this vulnerability, upgrade the Okta Hyperdrive Agent to version 1.5.2 or greater.

Download version 1.5.2 of the Okta Hyperdrive Integration plugin

Resolution

The vulnerability is present in the Okta Hyperdrive Agent versions 1.4.0 through 1.5.1 and is resolved in version 1.5.2.

CVE details