What is CVE-2026-78622?

CVE-2026-78622 is a medium-severity vulnerability in Okta Verify For Windows, classified under Improper Link Resolution Before File Access. CVSS score: 6.0/10. Published 2026-09-08.

How severe is CVE-2026-78622?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Vulnerability in Okta Verify For Windows

CVE-2026-78622

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H.

Affected products

Okta Verify For Windows

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

psirt@okta.com

Frequently asked questions

What is CVE-2026-78622?: CVE-2026-78622 is a medium-severity vulnerability in Okta Verify For Windows, classified under Improper Link Resolution Before File Access. CVSS score: 6.0/10. Published 2026-09-08.
How severe is CVE-2026-78622?: Medium severity. CVSS v3 base score is 6.0 out of 10.