CVE-2026-72534

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.5.7

Description A privilege escalation issue exists where an attacker possessing a source-scoped SCIM provisioning token can obtain superuser privileges. This occurs because the SCIM group ingest function adopts any existing group by name and replaces its membership without validating the source scope against the target group. By provisioning a SCIM group that matches the name of an existing administrator group, an attacker can grant their provisioning token full IdP superuser access and lock out all current administrators.

Recommendations Update to version 2026.5.7 or later.