CVE-2026-63377

Received Received - Intake

TAKO AI Agent for Okta Unauthenticated Admin Account Creation

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: GitHub, Inc.

Description

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, `POST /api/auth/setup` in `src/api/routers/auth.py` allows an unauthenticated network attacker to create the first administrator account before the legitimate owner completes initial setup. The `initial_setup` function checks only the `is_setup` completion flag and requires no authentication, one-time bootstrap token, or network restriction. The default `docker-compose.yml` publishes port 8001 on all interfaces, the `Dockerfile` starts the listener on 0.0.0.0, and `src/api/main.py` mounts the authentication router without a global authentication guard. The endpoint invokes `create_auth_user` with `UserRole.ADMIN` and `set_auth_cookie`, issuing a valid `fctr_session` JWT cookie. Localhost-only CORS rules do not restrict non-browser HTTP clients, and the setup operation does not require access to a real Okta tenant. The attacker becomes the sole administrator and prevents legitimate first-run setup, can read Okta-synced user data, API tokens, chat history, and application configuration, modify users and Okta integration credentials, and lock out administrators or disable the service. Already completed setup is rejected. This issue is fixed in version 3.0.1-beta.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-30

Last Modified

2026-10-30

Generated

2026-10-31

AI Q&A

2026-10-31

EPSS Evaluated

N/A

NVD

CVE-2026-63377

Affected Vendors & Products

Vendor	Product	Version / Range
fctr-id	okta-ai-agent	< 3.0.1-beta

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

TAKO AI Agent for Okta prior to version 3.0.1-beta has an unauthenticated endpoint POST /api/auth/setup that allows attackers to create the first administrator account during initial setup. The endpoint lacks authentication checks, network restrictions, or a bootstrap token requirement. Attackers can exploit this to gain full admin access, bypass legitimate setup, and take control of the Okta tenant.

Detection Guidance

Check if the TAKO AI Agent for Okta is running on port 8001 by using commands like 'netstat -tulnp | grep 8001' or 'ss -tulnp | grep 8001'. Verify if the service is exposed on all interfaces (0.0.0.0) instead of localhost only.

Impact Analysis

An attacker exploiting this can become the sole administrator, lock out legitimate users, read sensitive data like user information and API tokens, modify configurations, and disable the service. The vulnerability only affects setups not yet completed, as completed setups are rejected.

Compliance Impact

This vulnerability could lead to unauthorized access and exposure of sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Unauthorized admin access may result in data breaches, non-compliance with privacy regulations, and potential legal consequences.

Mitigation Strategies

Upgrade to version 3.0.1-beta or later immediately. If upgrading is not possible, restrict access to port 8001 using firewall rules to localhost only and disable external exposure in the docker-compose.yml file.

Hi! I’m here to help you understand CVE-2026-63377. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70