Is CVE-2026-85981 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85981?

CVE-2026-85981 has a CVSS v3 severity of MEDIUM (6.7).

Back

CVE-2026-85981

Description

The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings.