Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-78622

Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal

Description

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Okta Okta Verify for Windows

Default version status: unaffected

  • 5.1.3 to < 7.0.0affected

References