fctr-id okta-ai-agent
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-63378 | < 3.0.1-beta | TAKO AI Agent for Okta: Authenticated Python execution through validator bypass | HIGH 8.8 | |||
| CVE-2026-63377 | < 3.0.1-beta | TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover | CRITICAL 9.8 |