What is CVE-2026-72534?
CVE-2026-72534 is a privilege escalation vulnerability in Authentik Security authentik through version 2026.5.6. An attacker with a source-scoped SCIM provisioning token can gain superuser privileges by provisioning a SCIM group that matches the name of an existing administrator group, exploiting a flaw in the SCIM group ingest function.
Azərbaycanca: CVE-2026-72534 Authentik Security authentik-in 2026.5.6 və əvvəlki versiyalarında aşkarlanan imtiyaz artırma zəifliyidir. Mənbə ilə məhdudlaşdırılmış SCIM provisioning token-ə sahib hücumçu, mövcud administrator qrupu ilə eyni adda SCIM qrupu yaradaraq superuser hüquqları əldə edə bilər. Bu zəiflik SCIM qrup yerləşdirmə funksiyasındakı qüsurdan qaynaqlanır.
Related CVEs
link basis: same weakness class CWE-862
FAQ2
What type of security issue is CVE-2026-72534 in Authentik Security's product?
CVE-2026-72534 is a privilege escalation vulnerability in Authentik Security authentik.
How can an attacker exploit the CVE-2026-72534 vulnerability?
An attacker with a source-scoped SCIM provisioning token can gain superuser privileges by provisioning a SCIM group that matches the name of an existing administrator group.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.