Path Traversal in Okta Access Gateway Backup Restore

Publication date: 2026-09-08

Last updated on: 2026-09-22

Assigner: Okta

Description

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-22

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-78624

Affected Vendors & Products

Vendor	Product	Version / Range
okta	access_gateway	to 2026.9.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

The Okta Access Gateway backup restore function fails to validate the filename in an encrypted backup payload. This allows the system to write file contents to unintended locations on the appliance filesystem.

Impact Analysis

An attacker could exploit this to write malicious files to arbitrary locations on the Okta Access Gateway appliance. This may lead to unauthorized access, data corruption, or system compromise depending on the written files.

Mitigation Strategies

Apply the latest Okta Access Gateway update or patch provided by Okta to fix the backup restore filename validation issue.

Hi! I’m here to help you understand CVE-2026-78624. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70