Vulnerabilities

TI-2026-63471 CVE-2026-94606

authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage

MEDIUM 41

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.9 Network No auth No interaction EPSS 0.00489 Published 2026-09-24 Fixed in 2026.2.7, 2026.5.7 +1 CWE-287

TI-2026-63472 CVE-2026-94609

authentik: Privilege Escalation to Superuser via Group Hierarchy

MEDIUM 41

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00514 Published 2026-09-24 Fixed in 2026.2.7, 2026.5.7 +1 CWE-269

TI-2026-63473 CVE-2026-94611

authentik: Stored credentials are readable with view permission alone

LOW 37

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00333 Published 2026-09-24 Fixed in 2026.2.7, 2026.5.7 +1 CWE-200

TI-2026-63474 CVE-2026-94612

authentik: Authentication bypass via assertion confusion in SAML sources

LOW 34

authentik is an open-source identity provider.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00267 Published 2026-09-24 Fixed in 2026.2.7, 2026.5.7 +1 CWE-287

TI-2026-63475 CVE-2026-94613

authentik: Denial of Service via Document Type Declarations in SAML Messages

MEDIUM 40

authentik is an open-source identity provider.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00643 Published 2026-09-24 Fixed in 2026.2.7, 2026.5.7 +1 CWE-770

TI-2026-41431 CVE-2026-57580

authentik: Account Takeover via SAML NameID Comment Truncation

MEDIUM 49

authentik is an open-source identity provider.

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.0059 Published 2026-08-18 Fixed in 2026.2.6, 2026.5.5 CWE-436

TI-2026-39805 CVE-2026-55106

authentik: Unauthenticated LDAP directory data disclosure

LOW 30

authentik is an open-source identity provider.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00437 Published 2026-08-18 Fixed in 2026.2.6, 2026.5.5 CWE-862

TI-2026-44115 CVE-2026-61574

authentik RAC: access any endpoint via an unrelated application

MEDIUM 41

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2026-08-18 Fixed in 2026.2.6, 2026.5.5 CWE-639

TI-2026-39543 CVE-2026-54730

Improper access control in goauthentik authentik

MEDIUM 40

authentik is an open-source identity provider.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0068 Published 2026-08-18 Fixed in 2026.2.6, 2026.5.5 CWE-284

TI-2026-36603 CVE-2026-49448

authentik: SourceStage bypass via empty POST

HIGH 82

authentik is an open-source identity provider.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00405 Published 2026-06-02 Fixed in 2025.12.6, 2026.2.4 +1 CWE-287

TI-2026-36598 CVE-2026-49443

authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API

HIGH 73

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00298 Published 2026-06-02 Fixed in 2025.12.6, 2026.2.4 +1 CWE-287

TI-2026-34789 CVE-2026-47201 · GHSA-c3m2-jqmq-pvp3

authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

LOW 38

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00182 Published 2026-06-02 Fixed in 2025.12.5, 2026.2.3 +2 CWE-20

TI-2026-31057 CVE-2026-42849

authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover

MEDIUM 40

authentik is an open-source identity provider.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00327 Published 2026-06-02 Fixed in 2025.12.5, 2026.2.3 CWE-79

TI-2026-30124 CVE-2026-41569

authentik: WS-Federation wreply origin bypass can exfiltrate signed login responses to attacker-controlled endpoints

LOW 36

authentik is an open-source identity provider.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00175 Published 2026-06-02 Fixed in 2026.2.3 CWE-601

TI-2026-30132 CVE-2026-41577

authentik: SAML source does not validate Conditions, timing, or audience on assertions

LOW 30

authentik is an open-source identity provider.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00169 Published 2026-06-02 Fixed in 2025.12.5, 2026.2.3 CWE-345

TI-2026-28986 CVE-2026-40172

authentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser

LOW 36

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00546 Published 2026-05-22 Fixed in 2025.12.5, 2026.2.3 CWE-269

TI-2026-28981 CVE-2026-40166

authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/

LOW 32

authentik is an open-source identity provider.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2026-05-22 Fixed in 2025.12.5, 2026.2.3 CWE-200

TI-2026-28980 CVE-2026-40165

authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation

MEDIUM 40

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00502 Published 2026-05-20 Fixed in 2025.12.5, 2026.2.3 CWE-287

TI-2026-20952 CVE-2026-25922

authentik has a Signature Verification Bypass via SAML Assertion Wrapping

MEDIUM 40

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00241 Published 2026-02-12 Fixed in 2025.8.6, 2025.10.4 +1 CWE-287

TI-2026-20816 CVE-2026-25748

authentik has a forward authentication bypass with broken cookie

MEDIUM 44

authentik is an open-source identity provider.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00679 Published 2026-02-12 Fixed in 2025.10.4, 2025.12.4 CWE-287

TI-2026-20375 CVE-2026-25227

authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint

MEDIUM 43

authentik is an open-source identity provider.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00891 Published 2026-02-12 Fixed in 2025.8.6, 2025.10.4 +1 CWE-94

TI-2025-40054 CVE-2025-64708 · GHSA-ch7q-53v8-73pc

authentik invitation expiry is delayed by at least 5 minutes

LOW 32

authentik is an open-source Identity Provider.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00265 Published 2025-11-19 Fixed in 2025.10.2, 2025.8.5 +1 CWE-613

TI-2025-39911 CVE-2025-64521 · GHSA-xr73-jq5p-ch8r

authentik deactivated service accounts can authenticate to OAuth

LOW 22

authentik is an open-source Identity Provider.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00234 Published 2025-11-19 Fixed in 2025.10.2, 2025.8.5 +1 CWE-289

TI-2025-33807 CVE-2025-53942 · GHSA-9g4j-v8w5-7x42

authentik has an insufficient check for account active status during OAuth/SAML authentication

LOW 32

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols.

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.00579 Published 2025-07-23 Fixed in 2025.6.4, 0.0.0-20250722122105-7a4c6b9b50f8 CWE-269

TI-2025-32648 CVE-2025-52553

authentik has Insufficient Session verification for Remote Access Control endpoint access

LOW 25

authentik is an open-source identity provider.

CVSS 4.0MEDIUM 5.5 Network No auth User interaction EPSS 0.00522 Published 2025-06-27 Fixed in 2025.6.3, 2025.4.3 CWE-287

Vulnerabilities

Filters