Authentik Security vulnerabilities
We track 2 vulnerabilities in Authentik Security products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Authentik Security vulnerabilities
- 8.8 High severity
authentik: Improper Privilege Management
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local
- 8.8 High severity
authentik: Improper Privilege Management
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name