Skip to content
OpenAdvisories

Vendor

goauthentik

45 known vulnerabilities.

Products

authentik 45
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-94609 Public exploit

    authentik: Privilege Escalation to Superuser via Group Hierarchy

    authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a group, group membership, or a user can grant superuser status to an account or assign an existing role to a group withou…

    goauthentik authentik