authentik vulnerabilities

2 known vulnerabilities in authentik from Authentik Security. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  authentik: Improper Privilege Management

  CVE-2026-72537Aug 11, 2026Authentik Security

  A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local

• 8.8 High severity

  authentik: Improper Privilege Management

  CVE-2026-72534Aug 11, 2026Authentik Security

  A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name