HighVulnerability
CVE-2026-63378: TAKO AI Agent for Okta code execution via execute-script endpoint
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-63378
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
TAKO AI Agent for Okta, prior to 3.0.1-beta, lets any authenticated user with a valid `fctr_session` cookie submit arbitrary Python through `POST /api/react/execute-script`, without administrator privilege. The `script_code` bypasses AI content filtering and passes an AST check that misses dynamic `getattr` call chains through `__builtins__`, then runs as root in the default container, enabling disclosure of Okta API tokens, the JWT key and the SQLite database, plus backend pivoting and persistence.
Mitigation
Fixed in version 3.0.1-beta.
Topics
Related items
- CriticalCVE-2026-63377: TAKO AI Agent for Okta unauthenticated admin account creation via setup endpointSimilar attack · NVD/CVE Database
- HighCVE-2026-119337: RAGFlow agent chat completions API bypasses access check on private agentsSimilar attack · NVD/CVE Database
- MediumCVE-2026-119328: Immich unauthenticated /predict endpoint allows arbitrary cache deletionSimilar attack · NVD/CVE Database
- HighCVE-2026-119978: Flowise sandbox escape to OS command execution via node-custom-function endpointSimilar attack · NVD/CVE Database
- HighCVE-2026-61789: DBHub read-only SQL validation bypass on MySQL and MariaDB connectorsSimilar attack · NVD/CVE Database