EUVD-2026-74164
GHSA-7r5r-h4wq-43gr
Severity by source
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Admin SSH prerequisite captured by PR:H; once authenticated, eval injection is straightforward (AC:L), not requiring additional complex conditions.
Primary rating from Vendor (okta).
CVSS VectorVendor: okta
Lifecycle Timeline
2DescriptionCVE.org
The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.
AnalysisAI
Eval injection in the Okta Access Gateway management console allows an authenticated administrator, connected via SSH, to execute arbitrary code with the privileges of the management console process. The root cause (CWE-95) is unsanitized user input passed directly to eval() in an exception handler context, meaning any administrative SSH session can be leveraged for full code execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete prerequisites: (1) valid administrator-level credentials for the Okta Access Gateway management console, and (2) an established SSH session to that console. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 6.6 (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) correctly reflects a high-impact but strongly gated vulnerability: exploitation demands both administrator-level credentials and an established SSH session to the management console, so the realistic threat actor pool is limited to insiders, compromised admin accounts, or attackers who have already achieved privileged lateral movement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Okta Access Gateway to version 2026.9.1 or later, as confirmed by the vendor advisory at https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-exception-handler-cve-2026-78550. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-95 – Eval Injection
View allShare
External POC / Exploit Code
Leaving vuln.today