CVE-2026-78623: Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores

Published Sep 8, 2026

Updated

The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the configured backend database.

Affected Software

1 affected component

Okta Okta Access Gateway

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Okta Access Gateway to a version that resolves this vulnerability.
Fixed in 2026.9.1

Event History

Sep 8, 2026

CVE Published

via MITRE·08:08 PM

Data Sourced

via MITRE·08:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Exposure is limited to Okta Access Gateway deployments using the advanced mode datastore configuration with a backend database. The issue occurs when SAML assertion values are interpolated into datastore queries.

What does an attacker need to exploit this?

The CVSS vector indicates network reachability, low privileges, high attack complexity, and no user interaction. Exploitation also requires SAML assertion values to reach a vulnerable advanced-mode datastore query.

What could successful exploitation allow?

Successful exploitation can cause unintended SQL execution against the configured backend database. The reported impact includes high confidentiality impact and low integrity and availability impact.