CyberSecBulletin

Authentik Security vulnerabilities

We track 2 vulnerabilities in Authentik Security products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Authentik Security vulnerabilities

  • 8.8 High severity

    authentik: Improper Privilege Management

    CVE-2026-72537Authentik Security

    A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local

  • 8.8 High severity

    authentik: Improper Privilege Management

    CVE-2026-72534Authentik Security

    A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name