Input Sanitization Flaw in Okta Access Gateway Configuration

CVE-2026-78545

What is CVE-2026-78545?

The Okta Access Gateway contains an input sanitization flaw that allows unsanitized application label values to be incorporated into the nginx configuration file. This vulnerability enables attackers to inject malicious directives into the server block, potentially compromising server integrity and execution flow. Proper sanitization is crucial to prevent unauthorized command execution, ensuring robust security for web applications relying on nginx for configuration management.

References