CVE-2026-77585 — Improper Validation of SSH Target in Okta Privileged Access Client
The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option b…
Published: 2026-08-25 · CVSS: 5.3 · CVSS 3.1
The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7