CVE-2026-72537 | Authentik Security up to 2026.5.6 SCIM Provisioning privileges management

A vulnerability was found in Authentik Security Authentik up to 2026.5.6. It has been classified as critical. Affected is an unknown function of the component SCIM Provisioning. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-72537. The attack is possible to be carried out remotely. No exploit exists.