CVE-2024-9875: Okta Privileged Access Server Agent Sftd

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.

Affected products

• Okta Okta Privileged Access Server Agent Sftd: from 1.82.0, before 1.84.0 (fixed in 1.84.0)
• Okta Privileged Access Server Agent Sftd: from 1.82.0, before 1.84.0 (fixed in 1.84.0)

Published 2024-11-21. Last modified 2026-06-17.