Vulnerability · Published Sep 8, 2026 · Assigned by Okta
CVE-2026-85983Local Privilege Escalation in Auth0 AD/LDAP Connector
High 7.8
In plain English
A high-severity code injection in Auth0 AD/LDAP Connector from Auth0. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 90.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Auth0 | Auth0 AD/LDAP Connector | 0 – through 6.5.0 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H