CVE-2026-77585

The Okta Privileged Access client is vulnerable due to its failure to properly handle leading hyphens in the username field of SSH targets, which can lead to the username being misinterpreted as a command-line option by the SSH process. This flaw could potentially allow an attacker to execute arbitrary commands or gain unauthorized access. Organizations using this client should prioritize remediation to mitigate the risk of exploitation.