CVE-2026-85983highCWE-94

CVE-2026-85983: high-severity vulnerability in Auth0 AD/LDAP Connector

Local Privilege Escalation in Auth0 AD/LDAP Connector

Published · Updated

Follow this CVE+ Monitor Auth0 AD/LDAP Connector

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.2%
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Auth0 · Auth0 AD/LDAP Connector
Related CVEs — Auth0 AD/LDAP Connector

In the same product, most dangerous first.

CVE-2026-85982CRITICALStored Cross-Site Scripting (XSS) in Auth0 AD/LDAP ConnectorEPSS 0.4%CVE-2026-85981MEDIUMUnauthenticated Localhost Admin Panel in Auth0 AD/LDAP ConnectorEPSS 0.2%