CVE-2026-63377

TAKO first-run setup permits unauthenticated administrator takeover

fctr-id · TAKO AI Agent for Okta

First documented disclosure · Review checkpoint

Summary

An attacker can claim a newly deployed agent before its owner completes setup.

Severity and exploitation evidence

Critical · 9.8/10 · CVSS 3.1. Severity source.

Exploitation not established: Maintainer-published controlled reproduction; no confirmed victim or Okta tenant compromise.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The initial administrator endpoint lacks a bootstrap secret while default Docker networking exposes it.

Conditions required

Network access to a fresh instance before legitimate setup; completed setup rejects this path.

Potential impact

Application administrator access and control of stored integration data or tokens when present.

Affected versions and configurations

CNA: <3.0.1-beta; maintainer reproduction targets 3.0.0-beta.

Fix and mitigation status

3.0.1-beta.

Practical next steps

Upgrade; use the one-time setup token, loopback binding and protected provisioning before external exposure.

Operating lesson

First-run provisioning needs authentication before the first administrator exists.

Evidence and limits

June 30 GHSA and release precede October 30 CVE publication. Impact depends on available integration data and authority; this is not a vulnerability in Okta’s hosted service.

Sources