Vulnerabilities

TI-2026-25918 CVE-2026-33525 · GHSA-gmfg-3v4q-9qr4

Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting

LOW 4

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.

CVSS 4.0LOW 0.5 Adjacent network No auth User interaction EPSS 0.00237 Published 2026-03-26 Fixed in 4.39.16 CWE-79

TI-2021-12305 CVE-2021-32637 · GHSA-68wm-pfjf-wqp6

Authentication bypassed with malformed request URI

MEDIUM 47

Authelia is a a single sign-on multi-factor portal for web apps.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01868 Published 2021-05-28 Fixed in 4.29.3 CWE-287

TI-2021-10169 CVE-2021-29456 · GHSA-36f2-fcrx-fp4j

Authelia allows open redirects on the logout endpoint

LOW 26

Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0051 Published 2021-04-21 Fixed in 4.28.0 CWE-601

Vulnerabilities

Filters

Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting

Authentication bypassed with malformed request URI

Authelia allows open redirects on the logout endpoint