What’s Vulnerable › Vulnerabilities
CVE-2026-85983: Local Privilege Escalation in Auth0 AD/LDAP Connector
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-08 · updated 2026-09-10
- Weakness: CWE-94
Description
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
Affected products
- Auth0 AD/LDAP Connector: through 6.5.0
References
Get alerted when CVE-2026-85983 or the next vulnerability affects your stack