The Okta Hyperdrive Agent plugin version 1.2.0 has a flaw where it returns a success response lacking a signed SAML assertion under certain policy conditions (no MFA required). This response includes only a bare boolean validation indicator without any cryptographic artifact, which means the relying application cannot cryptographically verify the authentication decision. This incorrect implementation of the authentication algorithm can lead to integrity issues in authentication verification.

The vulnerability impacts the integrity of the authentication process by delivering an unverifiable authentication verdict to the relying application. Although confidentiality is not affected, the inability to cryptographically verify the authentication response can allow an attacker with limited privileges to potentially bypass intended authentication checks, leading to unauthorized access or privilege escalation within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time.