CVE-2026-77585

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published Aug 25, 2026

Vendor unknown

Description

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

References

https://trust.okta.com/security-advisories/improper-validation-ssh-target-in-okta-privileged-access-client-cve-2026-77585