What is GHSA-mm4c-wvrq-74qm?

GHSA-mm4c-wvrq-74qm is a security advisory published by GitHub Security Advisories with High severity. The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an...

Which CVE IDs does GHSA-mm4c-wvrq-74qm cover?

GHSA-mm4c-wvrq-74qm covers the following CVE IDs: CVE-2026-78627. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mm4c-wvrq-74qm?

GHSA-mm4c-wvrq-74qm has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-mm4c-wvrq-74qmHighCVSS 7.3

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an...

Vendor

GitHub Security Advisories

Published

September 8, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-78627 →

📋 Description

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the workstation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-78627
https://trust.okta.com/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627
https://github.com/advisories/GHSA-mm4c-wvrq-74qm