CVE-2026-63377

Prior to version 3.0.1-beta , the TAKO AI Agent for Okta is vulnerable to an unauthenticated first-run administrator takeover. The root cause is a missing authentication check in the initial_setup function within src/api/routers/auth.py (endpoint POST /api/auth/setup). Because the application sta...