Privileged Access and Advanced Server Access
CVE-2024-9875: Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation in Okta Privileged Access Server Agent (SFTD)
Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Okta Privileged Access Server Agent (SFTD) 1.82 | 1.84.0 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.