The Okta Access Gateway suffers from an SQL injection vulnerability due to improper sanitization of SAML assertion values before interpolation into database queries in advanced mode datastore configurations. Unsanitized values are directly substituted into query strings prior to preparation, enabling unintended SQL commands to execute against the configured backend database. This vulnerability has a CVSS 3.1 base score of 7.7, reflecting network attack vector, high attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, low integrity impact, and low availability impact. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker with low privileges and no user interaction to execute unintended SQL commands on the backend database, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact), limited modification of data (low integrity impact), and limited disruption of service (low availability impact). The attack complexity is high, which may limit exploitability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the advanced mode datastore configuration and carefully validate or sanitize SAML assertion inputs if possible. Monitor vendor communications for updates on patches or official mitigations.