EUVD-2026-74182
GHSA-872h-225f-x88w
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Local access and high-privilege management credentials are required; root-level command execution yields full C/I/A impact on the vulnerable appliance.
Primary rating from Vendor (okta).
CVSS VectorVendor: okta
Lifecycle Timeline
2DescriptionCVE.org
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS commands with root privileges.
AnalysisAI
OS command injection in Okta Access Gateway (versions prior to 2026.9.1) allows an authenticated high-privileged local user to inject shell metacharacters into SNMP configuration values, causing a privileged backend script to execute arbitrary OS commands as root. The vulnerability (CWE-78) stems from failure to sanitize user-supplied configuration data before incorporating it into OS command construction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated session on the Okta Access Gateway management interface with sufficient privileges to modify SNMP configuration settings (PR:H as confirmed by the CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.7 accurately reflects the constrained attack surface: exploitation requires both local access and high-privilege credentials for the management interface (AV:L/PR:H), restricting realistic attackers to insiders, compromised administrator accounts, or adversaries who have already established privileged local access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Okta Access Gateway to version 2026.9.1 or later as directed by the Okta security advisory at https://trust.okta.com/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today