CVE-2026-94609

Summary

The flaw allows an account with delegated permissions to grant superuser status or assign roles, bypassing necessary authorization checks, leading to unauthorized administrative access.

Exploitability

Exploitation is moderately hard as it requires an account with delegated permissions and knowledge of the affected group hierarchy, but preconditions are necessary to identify vulnerable deployments.

Blast radius

If exploited, this could result in full administrative control being granted to unauthorized accounts, leading to potential data breaches or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to authentik version 2026.2.7, 2026.5.7, or 2026.8.2.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.