CVE-2026-78622

Awaiting Analysis Awaiting Analysis - Queue

Okta Verify for Windows Uninstaller Directory Traversal Vulnerability

Publication date: 2026-09-08

Last updated on: 2026-09-10

Assigner: Okta

Description

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-10

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-78622

Affected Vendors & Products

Vendor	Product	Version / Range
okta	okta_verify	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves the Okta Verify for Windows uninstaller deleting files without checking if the user data directory is a filesystem junction. It uses elevated privileges to follow the junction target, causing unintended recursive deletion of directory contents.

Detection Guidance

To detect this vulnerability, check if Okta Verify for Windows versions 5.1.3 through 6.12.3 are installed. Verify filesystem junctions in user data directories before uninstallation. No specific commands are provided in the context.

Impact Analysis

An attacker with low privileges could trick an admin into uninstalling Okta Verify, leading to deletion of critical files outside the intended directory. This may cause data loss or system instability.

Mitigation Strategies

Upgrade Okta Verify for Windows to version 7.0.0 or later to remediate the vulnerability. Ensure no filesystem junctions exist in user data directories before uninstallation.

Hi! I’m here to help you understand CVE-2026-78622. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70