Authorization Bypass in Okta Access Gateway

CVE-2026-78626

What is CVE-2026-78626?

The Okta Access Gateway suffers from an input sanitization flaw that inadequately processes data inputs and regular expression checks during Protected Rule authorization evaluations. When an administrator sets up Protected Rules for specific application resources, this vulnerability can lead to an authorization bypass, allowing potential unauthorized access to sensitive applications.

References