Medium severity6.0NVD Advisory· Published Sep 8, 2026· Updated Sep 8, 2026
CVE-2026-78552
CVE-2026-78552
Description
The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.