Improper Input Sanitization in Okta Access Gateway Affecting LDAP Configuration

CVE-2026-78579

What is CVE-2026-78579?

The Okta Access Gateway is susceptible to an input validation issue where SAML assertion attribute values are improperly sanitized before being included in LDAP search filters. This flaw allows raw values to be directly inserted into filter strings, resulting in unintended alterations to query logic during LDAP operations. This could potentially lead to incorrect access controls or information disclosure within the LDAP datastore.

References