---
id: "CVE-2026-115547"
kind: "vulnerability"
aliases: ["CVE-2026-115547"]
title: "Okta Access Gateway: admin console input flaw runs system commands"
severity: "critical"
cvss: 9.1
epss: 0.00444
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Okta Access Gateway", "fixed": ["2026.10.2"], "affected": "< 2026.10.2", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["command-injection", "infrastructure", "okta-access-gateway", "self-hosted", "vendor"]
not_affected_if: ["already-on-2026.10.2", "managed-hosting"]
published_at: "2026-10-23T04:18:16+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-24T07:15:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115547", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T22:13:39+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-115547", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# Okta Access Gateway: admin console input flaw runs system commands

An input validation flaw in the Okta Access Gateway Admin Console lets specially formatted configuration values be processed as commands. An authenticated administrator can run system commands as the OAG service account.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Okta Access Gateway affected < 2026.10.2 fixed 2026.10.2

## How to check

Check the installed OAG version in the Admin Console and confirm it is below 2026.10.2.

## Fix

Upgrade Okta Access Gateway to 2026.10.2 or later.

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115547
- 2026-10-23T22:13:39+00:00 analyst — Read Okta advisory (Oct 22 2026): CVSS 9.1 (PR:H, S:C), fixed in OAG 2026.10.2. Exploitation status not stated; no PoC or discussion found (social not searched in depth). Admin Console version check not described by Okta.
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-115547

## Documents

- [advisory] Okta: Command Execution via Admin Console Input in Okta Access Gateway CVE-2026-115547 https://trust.okta.com/security-advisories/command-execution-via-admin-console-input-in-okta-access-gateway-cve-2026-115547

## From the sources

An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_