CVE-2022-24295: Okta Advanced Server Access Client For Windows

High severity, CVSS 8.8. EPSS: 16.6% chance of exploitation in the next 30 days.

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

Affected products

• Okta Advanced Server Access Client For Windows: before 1.57.0 (fixed in 1.57.0)

Published 2022-02-21. Last modified 2026-06-17.