| Package | Affected versions | Patched versions |
|---|---|---|
| access gateway | < 2026.9.1 | 2026.9.1 |
The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free