Paper/Archive/CVE-2026-78623

CVE-2026-78623

Okta Okta Access Gateway — Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores

EPSS 0.4%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (NVD)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 39.1.391 × 207.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the configured backend database.

Affected

ProductAffectedFixed inSource

Okta Access Gateway< 2026.9.12026.9.1CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Okta (CNA)7.7CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

reftrust.okta.com/security-advisories/improper-handling-of-saml-assertion-attributes-in-okta-access-gateway-advanced-mode-datastores-cve-2026-78623