CVE-2026-78624

MEDIUM NVD

CVSS Score 4.9

Severity MEDIUM

Published Sep 08, 2026

Vendor unknown

Description

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.

References

https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-backup-and-restore-functionality-cve-2026-78624