# CVE-2026-78627: Improper Credential Protection in Okta Hyperdrive Integration Installer Logging

> CVE-2026-78627: Improper Credential Protection in Okta Hyperdrive Integration Installer Logging. CVSS 7.3 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-78627
Last updated: 2026-09-22T20:10:34Z

- Published: 2026-09-08 20:12 UTC · Updated: 2026-09-22 20:10 UTC · Assigner: Okta
- CVSS: 7.3 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- EPSS: 0.14%, 3th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-532

## Description

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the workstation.

## Affected vendors and products

- Okta: Okta Hyperdrive Integration Plugin

## Tracked companies

- [Okta](https://rewindex.com/company/okta.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-78627)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-78627)
- [https://trust.okta.com/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627](https://trust.okta.com/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-78627 · Markdown: https://rewindex.com/cve/CVE-2026-78627.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-78627 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:10:51.502Z