CVE-2026-78622Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal

Beschreibung

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://trust.okta.com/security-advisories/improper-link-resolution-in-okta-verify-for-windows-uninstaller-da…