CVE-2026-85983 — Local Privilege Escalation in Auth0 AD/LDAP Connector
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's con…
Published: 2026-09-08 · CVSS: 7.8 · CVSS 3.1
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7