CVE-2026-78574 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

High 7.5 Published 8 Sep 2026 Updated 10 Sep 2026

Attackers can execute arbitrary code by placing malicious assemblies in user registry paths, potentially escalating privileges within the Okta Hyperdrive plugin.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-78574?

CVE-2026-78574 is a high-severity code injection vulnerability in Okta Hyperdrive Integration Plugin, published on 8 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.

Weakness: CWE-426

Which versions are affected by CVE-2026-78574?

It affects 1 product.

Products include Okta Hyperdrive.

How do I fix CVE-2026-78574?

No fix has been published for CVE-2026-78574 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2026-78574 being exploited?

There is no known exploitation of CVE-2026-78574 in the wild and no public exploit code.

Sources

Also known as GHSA-7xfw-pj33-px3g.