CVE-2026-78624 — Improper Path Validation in Okta Access Gateway Backup and Restore Functionality

CVE-2026-78624

Improper Path Validation in Okta Access Gateway Backup and Restore Functionality PUBLISHED

Description (CNA)

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.

Affected (CNA)

Vendor / product	Versions
Okta / Okta Access Gateway	affected 0 before 2026.9.1

CWE

CWE-22

References

https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-backup-and-restore-functionality-cve-2026-78624

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.