CVE-2026-78630

Analyzed Analyzed - Analysis Complete

Okta Access Gateway Command Injection via SNMP Configuration

Publication date: 2026-09-08

Last updated on: 2026-09-22

Assigner: Okta

Description

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS commands with root privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-22

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-78630

Affected Vendors & Products

Vendor	Product	Version / Range
okta	access_gateway	to 2026.9.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability in the Okta Access Gateway involves improper neutralization of shell metacharacters in SNMP configuration values. An authenticated local user with access to the management interface can inject crafted values that are used to construct OS commands. This leads to arbitrary OS command execution with root privileges.

Detection Guidance

Check if your Okta Access Gateway is running a vulnerable version (prior to 2026.9.1) by running: ssh admin@<gateway-ip> 'show version'. If the version is below 2026.9.1, the system is vulnerable. Verify if the SSH management interface is accessible from your network.

Impact Analysis

If exploited, this vulnerability allows an attacker with local access and valid credentials to execute arbitrary commands as root on the Okta Access Gateway. This could lead to full system compromise, unauthorized data access, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access or control of systems handling sensitive data, potentially violating GDPR or HIPAA requirements for data protection and access controls. Compliance may be impacted if the system processes regulated data.

Mitigation Strategies

Upgrade Okta Access Gateway to version 2026.9.1 or later immediately. Ensure the SSH management interface is not exposed to untrusted networks. Restrict access to the management interface to authorized users only.

Hi! I’m here to help you understand CVE-2026-78630. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70