Improper Input Validation in Okta Privileged Access Client

CVE-2026-77585

What is CVE-2026-77585?

The Okta Privileged Access client fails to properly validate the username field in the SSH target input. Specifically, leading hyphens are not adequately rejected, which may allow for unintended command-line option interpretations by the SSH process. This flaw can create security risks by enabling unauthorized command executions. It is crucial for users to ensure that input is sanitized to avoid exploitation through this weakness.

References