Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-78622

Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal

CVSS 3.1 6.0 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-78622

Published

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-78622

Published

Okta Verify for Windows

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Okta",
                    "product": "Okta Verify for Windows",
                    "versions": [
                        {
                            "version": "5.1.3",
                            "status": "affected",
                            "lessThan": "7.0.0",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON