Read the docs

Authentik Security

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Authentik Security records in CISA KEV

No Authentik Security vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-50797 CVE-2026-72537 · GHSA-f25x-j567-ffxh

Authentik Security authentik - Privilege Escalation

Priority MEDIUM 40

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a S…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00396 Published 2026-08-11 No fix listed CWE-269
TI-2026-50794 CVE-2026-72534 · GHSA-phh7-mppp-4jx8

Authentik Security authentik - Privilege Escalation

Priority MEDIUM 40

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-11 No fix listed CWE-269
Open these records in search →