CVE-2026-78574

Published: Sep 8, 2026Modified: Sep 23, 2026

6.3

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.0 / Impact: 5.2

Source: NVD

Description

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.

Affected (1)

Products: Okta: Hyperdrive

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Okta Hyperdrive	1.2.0 ≤ version ≤ 1.5.1

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

https://trust.okta.com/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-registry-handling-cve-2026-78574

Source: psirt@okta.com

Vendor Advisory

Timeline

No history available yet.