authd versions 0.6.0 through before 0.6.4 contain a bug where the primary group ID (GID) of a user can be incorrectly set to their user ID (UID) upon login if certain conditions are met. This affects users whose UID and primary GID differ, potentially causing local privilege escalation and improper file group ownership. A fix is available in version 0.6.4.