Nixpkgs security tracker
Untriaged
Permalink
CVE-2026-72534
8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created suggestion
Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adopts any existing group by name and replaces its membership without validating the source scope against the target group. An attacker can grant their provisioning token full IdP superuser access and lock out all existing administrators.
References
Affected products
authentik
- =<2026.5.6
Matching in nixpkgs
pkgs.authentik
Authentication glue you need
pkgs.authentik-outposts.ldap
Authentik ldap outpost. Needed for the external ldap API
pkgs.authentik-outposts.proxy
Authentik proxy outpost which is used for HTTP reverse proxy authentication
Package maintainers
-
@jvanbruegge Jan van Brügge <supermanitu@gmail.com>
-
@rissson Marc Schmitt <marc.schmitt@risson.space>