Race Condition Vulnerability in Okta Java Management SDK

CVE-2025-67505

What is CVE-2025-67505?

The Okta Java Management SDK, which is used for interacting with the Okta management API, is subject to a race condition issue. In versions 11.0.0 through 20.0.0, if multiple requests are made simultaneously via the ApiClient class, there is a risk that one request’s status code or response header could improperly influence another request's response. This behavior presents potential inconsistencies in API response handling. The issue was addressed in version 20.0.1, which mitigates these concerns and enhances overall API interaction reliability.

References