Skip to content

Vendor

Authentik Security vulnerabilities

2 published CVES affecting Authentik Security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Authentik Security alerts

Products

Latest Authentik Security CVEs

Newest publication first

  1. CVE-2026-72537 Authentik Security authentik - Privilege Escalation

    Published
    HighCVSS 8.8 EPSS 0.40%

    A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. Th...

  2. CVE-2026-72534 Authentik Security authentik - Privilege Escalation

    Published
    HighCVSS 8.8 EPSS 0.42%

    A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ing...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.