Privilege Escalation Vulnerability in Authentik Security Affecting User Accounts

CVE-2026-72537

What is CVE-2026-72537?

A vulnerability in Authentik Security allows attackers with a source-scoped SCIM provisioning token to gain unauthorized access to user accounts, including superuser accounts. This is possible by creating a SCIM user that matches the username of an existing local user, bypassing scope validations. The risky SCIM user ingestion process permits the modification or deletion of user accounts using only limited provisioning credentials, presenting significant security risks.

References