The Okta Access Gateway backup restore function does not properly validate the filename embedded in an encrypted backup payload. This improper limitation of a pathname to a restricted directory can cause file contents to be written to unintended locations on the appliance filesystem. The vulnerability has a CVSS 3.1 base score of 4.9 (medium severity), with network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No known exploits are reported in the wild, and no vendor remediation level or patch information is provided.

An attacker with high privileges on the Okta Access Gateway appliance can exploit this vulnerability to write files to arbitrary locations on the filesystem during the backup restore process. This could lead to unauthorized file placement, potentially impacting confidentiality. There is no direct integrity or availability impact reported. The vulnerability does not require user interaction and can be triggered remotely over the network given the required privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the backup restore functionality to trusted administrators only and monitor for any unauthorized use of backup restore operations.