GHSA-63pc-vhwj-p2qmMediumCVSS 6.0

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a...

Published
September 8, 2026
Last Modified
September 8, 2026

🔗 CVE IDs covered (1)

📋 Description

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.

🔗 References (3)