CVE ID :CVE-2026-63378 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid `fctr_session` cookie...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63378 - TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

VERWANDTEARTIKEL

CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names

CVE-2026-63377 - TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

CVE-2026-63393 - OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

CVE-2026-63396 - Coop has a data leak via unauthenticated GraphQL Query.allOrgs

CVE-2026-63338 - IXP Manager has Broken Object-Level Authorization

CVE-2026-63339 - IXP Manager has authenticated non-administrator privilege escalation