# CVE-2026-78630: Okta Access Gateway OS command injection in SNMP configuration

Source: https://junglewise.ai/threats/cve-2026-78630-okta-access-gateway-os-command-injection-in-snmp-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-08. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-78630 · Severity: medium · CVSS 6.7 · Published 2026-09-08

Okta Access Gateway is an identity and access management appliance used to secure network access. An authenticated local user with SSH management access can inject shell metacharacters into SNMP configuration settings, allowing arbitrary OS commands to execute with root privileges. This could enable an attacker with valid management credentials to fully compromise the appliance and the systems it protects.

Technologies: [Okta Access Gateway](https://junglewise.ai/threats/technologies/access-gateway). Vendors: [Okta](https://junglewise.ai/threats/vendors/okta).

## Quick answers

**Is CVE-2026-78630 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-78630 being exploited in the wild.

**How severe is CVE-2026-78630?** Medium severity, with a CVSS score of 6.7, published 8 September 2026.

**Which products and versions are affected?** Okta Access Gateway prior to 2026.9.1.

**Is there a fix for CVE-2026-78630?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-78630 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-78630?** Check whether you run Okta Access Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an OS command injection (CWE-78) in the SNMP configuration processing of Okta Access Gateway. The appliance fails to sanitize shell metacharacters in SNMP configuration values before passing them to a privileged script that constructs and executes OS commands. An authenticated user with access to the SSH management interface and valid management credentials can navigate to the SNMP configuration menu and supply crafted values containing shell metacharacters to trigger arbitrary command execution with root privileges. The attack requires local network access to the management interface, valid management account credentials, and user interaction to access the configuration menu. This vulnerability is fixed in version 2026.9.1 and later.

## Affected products

- Okta Access Gateway prior to 2026.9.1

## Timeline

- 2026-09-08: disclosed

## References

- [https://trust.okta.com/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630](https://trust.okta.com/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630)

## Related threats

- [Okta Access Gateway command execution in Admin Console](https://junglewise.ai/threats/cve-2026-115547-an-input-validation-issue-in-the-okta-access-gateway-oag-admin)
- [Okta Access Gateway authentication source validation bypass](https://junglewise.ai/threats/cve-2026-115546-okta-access-gateway-oag-does-not-validate-the-selected)
- [Okta Access Gateway authorization bypass in Protected Rules](https://junglewise.ai/threats/cve-2026-78626-okta-access-gateway-authorization-bypass-in-protected-rules)
- [Okta Access Gateway code injection in dashboard labels](https://junglewise.ai/threats/cve-2026-78625-okta-access-gateway-code-injection-in-dashboard-labels)
- [Okta Access Gateway path traversal in backup restore](https://junglewise.ai/threats/cve-2026-78624-okta-access-gateway-path-traversal-in-backup-restore)