CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal

CVE-2026-78622

Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal PUBLISHED

Description (CNA)

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

Affected (CNA)

Vendor / product	Versions
Okta / Okta Verify for Windows	affected 5.1.3 before 7.0.0

CWE

CWE-59

References

https://trust.okta.com/security-advisories/improper-link-resolution-in-okta-verify-for-windows-uninstaller-data-removal-cve-2026-78622

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.