CVE-2026-72534

CVE-2026-72534 describes a privilege escalation in Authentik (Authentik Security authentik) up to version 2026.5.6. A source-scoped SCIM provisioning token can elevate to superuser by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function ad...