CVE-2026-78574
Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.
| CWE | CWE-426 |
| Vendor | okta |
| Product | okta hyperdrive integration plugin |
| Published | Sep 8, 2026 |
| Last Updated | Sep 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for okta okta hyperdrive integration plugin
Be the first to know when new high vulnerabilities affecting okta okta hyperdrive integration plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
Okta / Okta Hyperdrive Integration Plugin
1.2.0 < 1.5.2