Authentik
Monthly
Multi-factor authentication bypass in authentik (goauthentik) allows an attacker who already knows a target user's password to redirect the email authenticator's one-time code to an address they control, complete enrollment of the email factor as the victim, and obtain a session with access to any single sign-on applications behind the account. Only deployments that enroll the email authenticator during an authentication or enrollment flow are affected, and only where the target has not yet enrolled the email factor; other authenticator types are unaffected. Rated 8.9 by the vendor (independent re-assessment scores it slightly lower on availability impact), there is no public exploit identified at time of analysis and no CISA KEV listing, but the precondition of prior credential knowledge makes this a high-value account-takeover primitive for attackers who phish or reuse passwords. Fixed in 2026.2.7, 2026.5.7, and 2026.8.2.
Privilege escalation in the authentik identity provider allows an account holding delegated group, group-membership, or user management rights to elevate itself to superuser by joining a group whose ancestor groups grant superuser status, or by assigning an existing role to a group without holding the change_role permission. Deployments running authentik before 2026.2.7, before 2026.5.7 on the 2026.5 line, or before 2026.8.2 on the 2026.8 line are affected, but exploitation is confined to installations that delegate those management capabilities to accounts that are not full administrators - single-administrator or non-delegated setups are unaffected. The flaw rates CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), requires the attacker to hold an authenticated delegated account, and no public exploit code has been identified at time of analysis; vendor patches are available and the fix set is documented in advisory GHSA-h6c5-mpvq-j4jc.
API serializers in authentik return stored credentials to any authenticated account that holds only VIEW permission on an affected configuration, exposing secrets the account was never authorized to read. Affected configurations include one-time-code delivery by mail or SMS, Google Workspace and Microsoft Entra outbound provisioning targets, endpoint (GDTC) device-trust stages, identity sources, the Kubernetes outpost service connection (kubeconfig), OAuth2 applications using a client or shared secret, and applications using a proxy provider; the flaw is fixed in 2026.2.7, 2026.5.7, and 2026.8.2. Exploitation requires an authenticated account (CVSS PR:L) that has been granted view - but not change - permission on one of those objects, so deployments where every viewer is already entitled to read those secrets are not affected; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV).
Authentication bypass in authentik's SAML Source lets an unauthenticated attacker who holds any validly-signed, unexpired SAML assertion from a trusted identity provider log in as the user named in that assertion, because releases before 2026.2.7, 2026.5.7, and 2026.8.2 never verify that the assertion was issued for that Source (no audience, Destination, or SubjectConfirmationData Recipient binding) and never record assertions already accepted, permitting replay. Attackers must therefore obtain an assertion minted for a different service provider or reuse a previously captured assertion; no authentik-side credentials or user interaction are required (PR:N/UI:N), which is why the issue scores 7.4 despite the High attack complexity driven by that prerequisite. Only SAML Sources are affected - SAML Providers and other Source types are explicitly not - and no public exploit code was identified at time of analysis, with no CISA KEV listing.
Malformed SAML messages sent to an authentik deployment that uses SAML either as an identity provider (/application/saml/*) or as a SAML source (/source/saml/*) can terminate the worker process handling the request, so every request assigned to that worker fails. No authentication or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), and because workers restart automatically and database-backed sessions survive, each message causes only a brief localised failure - sustained disruption requires a continuous stream of malicious messages, which is why the assessed availability impact is Low rather than High. Only SAML endpoints are affected; deployments using OAuth/OIDC/LDAP or other protocols are not exploitable, and no public exploit code was identified at time of analysis (CWE-770, CVSS 7.5 per the CVE record, adjusted to A:L in our independent assessment).
Authentication bypass in the Apache Airflow FAB provider (apache-airflow-providers-fab before 3.9.0) allows an attacker who holds an OIDC id_token that the same Authentik identity provider minted for a different client application to log into Airflow as the named user, because the Authentik OAuth path in the FAB auth manager never validates the token's issuer or audience claims. Only deployments using the FAB auth manager with Authentik OAuth are affected, and only where that same Authentik instance also serves at least one other application, so the attacker must already possess a valid token from that other application (the assessed vector is AV:N/AC:H/PR:L/UI:N, reflecting these gated prerequisites). Risk is high on confidentiality and integrity for exposed deployments, but the exploit path is narrow; no public exploit has been identified at time of analysis and EPSS is low at 0.14% (4th percentile), so this is a strongly gated authentication-bypass issue rather than a broad remote-takeover vector.
Account takeover in authentik (goauthentik) identity provider before 2026.2.6 and 2026.5.5 allows an attacker holding an account on an upstream SAML identity provider to hijack a victim's authentik account. By injecting an XML comment into the SAML NameID (e.g. victim<!--x-->attacker), the value authentik reads for user matching is truncated to the text before the comment while the IdP's signed assertion still validates, because comment-excluding canonicalization (xml-exc-c14n) strips the comment before the signature digest is computed. This binds the attacker's external identity to the victim's existing account without the victim's password or the IdP private key, and the malicious link persists across future logins. No public exploit identified at time of analysis; the flaw is fixed upstream and demonstrated by regression tests in the vendor patch.
Broken object-level authorization in authentik's enterprise Remote Access Control (RAC) module exposes every configured RDP, SSH, and VNC endpoint - including stored connection credentials - to any authenticated user, irrespective of their assigned application access. Versions prior to 2026.2.6 and 2026.5.5 are affected; the flaw exists in both the endpoint listing API (which omits per-user access filtering) and the connection initiation flow (which does not validate that the requested endpoint belongs to the application through which the user is launching). No public exploit has been identified at time of analysis, though the attack requires only a valid authentik account and delivers full interactive access to infrastructure the attacker was never authorized to reach.
Device trust bypass in authentik enterprise Google Chrome stages allows an authenticated attacker to skip Google Verified Access API attestation and complete authentication from an unverified device. Enterprise deployments using either the Google Chrome Endpoint stage with mode=REQUIRED or the deprecated Google Chrome Device Trust Connector (GDTC) stage are affected in all supported versions prior to 2026.2.6 and 2026.5.5. No public exploit is identified at time of analysis, but the bypass requires only that the attacker submit the stage form without triggering the verification iframe - a trivially reproducible action for any credential holder.
Privilege escalation in Authentik Security authentik through version 2026.5.6 allows an attacker holding a source-scoped SCIM provisioning token to take over any local account, including superuser accounts, by provisioning a SCIM user whose username matches an existing account. The SCIM user ingest function adopts pre-existing local accounts by username without enforcing scope boundaries, meaning a limited-privilege provisioning credential can rewrite or delete accounts entirely outside its intended scope. No public exploit has been identified at time of analysis, but the attack requires only network access and a valid SCIM token, making the exploitation bar low for any attacker who has obtained such a credential.
Privilege escalation in Authentik Security authentik through 2026.5.6 allows any holder of a source-scoped SCIM provisioning token to seize superuser control over the entire Identity Provider and permanently lock out all legitimate administrators. The root cause is the SCIM group ingest function's failure to validate whether the requesting token's source scope has authority over the target group - when an attacker provisions a SCIM group whose name matches an existing administrator group, authentik silently adopts and replaces that group's membership without authorization checks. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the high CVSS score of 8.8 and the total-takeover impact warrant immediate remediation.
Authentication bypass in authentik identity provider (versions prior to 2025.12.6, 2026.2.4, and 2026.5.1) allows remote unauthenticated attackers to circumvent the Source stage by submitting an empty POST request. With a CVSS score of 9.8 and CWE-287 (Improper Authentication), this flaw effectively defeats a core identity verification control; no public exploit identified at time of analysis, though the trivial trigger condition makes weaponization straightforward once details are widely studied.
Authentication bypass in authentik identity provider versions prior to 2025.12.6, 2026.2.4, and 2026.5.1 allows a low-privileged attacker who can modify a source connection and holds an account in one of the configured external sources to log into any account on the system. The flaw (CWE-287) carries a CVSS 8.8 rating with high impact across confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the issue is not currently listed in CISA KEV.
Cross-site scripting in authentik identity provider versions prior to 2025.12.5 and 2026.2.3 allows remote attackers to execute arbitrary JavaScript in a victim's browser by abusing the AutosubmitStage within the Simple Flow Executor (SFE). With a CVSS of 9.3 reflecting scope change and high impact to confidentiality/integrity, exploitation enables session hijacking against an identity provider, but no public exploit identified at time of analysis.
Privilege escalation in authentik identity provider versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2 allows an authenticated user holding the change_user permission to assign arbitrary groups - including superuser groups - to any target user via the PATCH /api/v3/core/users/{pk}/ endpoint. The UserSerializer skips the enable_group_superuser check enforced in the dedicated group-management paths, letting delegated user-management roles promote themselves or others to administrator-equivalent privilege. No public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV, but the trivial attack mechanics (a single PATCH request) make weaponization straightforward for any tenant that has delegated user administration.
Sensitive information disclosure in authentik (goauthentik) before 2025.12.5 and in the 2026.2.0-rc1 through 2026.2.2 branch allows any authenticated low-privilege user holding at least one OAuth2 access token to read the client_secret of confidential OAuth2 providers they previously authenticated against. The GET /api/v3/oauth2/access_tokens/ endpoint over-returns a nested provider object containing client_id and client_secret, exposing credentials that should be restricted to administrators. No public exploit has been identified at time of analysis and EPSS is negligible (0.01%), but the flaw is a straightforward credential leak requiring only a normal user session.
authentik is an open-source identity provider. [CVSS 8.8 HIGH]
Authentik Proxy Provider allows authentication bypass through malformed cookies when deployed with Traefik or Caddy as a reverse proxy, enabling attackers to access protected applications by circumventing forward authentication checks. The vulnerability stems from improper cookie validation that prevents the setting of required authentik-specific X-Authentik-* headers, potentially granting unauthorized access depending on the backend application's configuration. Affected versions prior to 2025.10.4 and 2025.12.4 are vulnerable; patches are available in the specified releases.
Code injection in authentik identity provider from 2021.3.1 through multiple versions. Users with delegated permissions can inject code. Patch available.
The LDAP Source debug API endpoint in authentik, an open-source identity provider, omits the object-level read-authorization filter present on the rest of the API prior to versions 2026.2.6 and 2026.5.5, enabling unauthenticated callers to retrieve LDAP directory metadata from any configured LDAP Source. Any network-reachable client can invoke the diagnostic action, causing the authentik server to connect to the upstream directory with its stored bind credentials and return a bounded set of distinguished names and attribute names - exposing account and group naming conventions and directory structure without disclosing attribute values. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
Open redirect in authentik's WS-Federation provider (all versions prior to 2026.2.3) allows an unauthenticated attacker to exfiltrate signed authentication assertions to attacker-controlled infrastructure by exploiting a prefix-only wreply URL validation check. Because the POST-based WS-Federation flow delivers a cryptographically signed identity assertion to whatever destination wreply specifies, successful exploitation leaks credential-bearing tokens rather than simply redirecting to a phishing page - elevating impact beyond a typical open redirect. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
SAML assertion validation in authentik's ResponseProcessor.parse() completely omits verification of the Conditions element, allowing unauthenticated remote attackers (PR:N per CVSS 4.0 vector) to replay expired SAML assertions or submit assertions originally issued for a different service provider. All authentik deployments prior to versions 2025.12.5 and 2026.2.3 that use SAML sources are affected. This is not listed in CISA KEV and no public exploit has been identified at time of analysis, but the low-complexity, network-accessible attack path against a core authentication primitive makes this a meaningful integrity risk in any SAML-federated deployment.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity.
authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token which is used for a single connection and is sent to the client in the URL. This token is intended to only be valid for the session of the user who authorized the connection, however this check is missing in versions prior to 2025.6.3 and 2025.4.3. When, for example, using RAC during a screenshare, a malicious user could access the same session by copying the URL from the shown browser. authentik 2025.4.3 and 2025.6.3 fix this issue. As a workaround, it is recommended to decrease the duration a token is valid for (in the RAC Provider settings, set Connection expiry to `minutes=5` for example). The maintainers of authentik also recommend enabling the option Delete authorization on disconnect.
authentik is an open-source identity provider. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, no authentication required.
Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source identity provider. Rated high severity (CVSS 7.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
authentik is an open-source Identity Provider. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.
authentik is an open-source Identity Provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentik is an open-source Identity Provider. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
Authentik is an open-source Identity Provider. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
authentik is an open-source Identity Provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
goauthentik is an open-source Identity Provider. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
authentik is an open-source Identity provider focused on flexibility and versatility. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
authentik is an open-source Identity Provider focused on flexibility and versatility. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multi-factor authentication bypass in authentik (goauthentik) allows an attacker who already knows a target user's password to redirect the email authenticator's one-time code to an address they control, complete enrollment of the email factor as the victim, and obtain a session with access to any single sign-on applications behind the account. Only deployments that enroll the email authenticator during an authentication or enrollment flow are affected, and only where the target has not yet enrolled the email factor; other authenticator types are unaffected. Rated 8.9 by the vendor (independent re-assessment scores it slightly lower on availability impact), there is no public exploit identified at time of analysis and no CISA KEV listing, but the precondition of prior credential knowledge makes this a high-value account-takeover primitive for attackers who phish or reuse passwords. Fixed in 2026.2.7, 2026.5.7, and 2026.8.2.
Privilege escalation in the authentik identity provider allows an account holding delegated group, group-membership, or user management rights to elevate itself to superuser by joining a group whose ancestor groups grant superuser status, or by assigning an existing role to a group without holding the change_role permission. Deployments running authentik before 2026.2.7, before 2026.5.7 on the 2026.5 line, or before 2026.8.2 on the 2026.8 line are affected, but exploitation is confined to installations that delegate those management capabilities to accounts that are not full administrators - single-administrator or non-delegated setups are unaffected. The flaw rates CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), requires the attacker to hold an authenticated delegated account, and no public exploit code has been identified at time of analysis; vendor patches are available and the fix set is documented in advisory GHSA-h6c5-mpvq-j4jc.
API serializers in authentik return stored credentials to any authenticated account that holds only VIEW permission on an affected configuration, exposing secrets the account was never authorized to read. Affected configurations include one-time-code delivery by mail or SMS, Google Workspace and Microsoft Entra outbound provisioning targets, endpoint (GDTC) device-trust stages, identity sources, the Kubernetes outpost service connection (kubeconfig), OAuth2 applications using a client or shared secret, and applications using a proxy provider; the flaw is fixed in 2026.2.7, 2026.5.7, and 2026.8.2. Exploitation requires an authenticated account (CVSS PR:L) that has been granted view - but not change - permission on one of those objects, so deployments where every viewer is already entitled to read those secrets are not affected; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV).
Authentication bypass in authentik's SAML Source lets an unauthenticated attacker who holds any validly-signed, unexpired SAML assertion from a trusted identity provider log in as the user named in that assertion, because releases before 2026.2.7, 2026.5.7, and 2026.8.2 never verify that the assertion was issued for that Source (no audience, Destination, or SubjectConfirmationData Recipient binding) and never record assertions already accepted, permitting replay. Attackers must therefore obtain an assertion minted for a different service provider or reuse a previously captured assertion; no authentik-side credentials or user interaction are required (PR:N/UI:N), which is why the issue scores 7.4 despite the High attack complexity driven by that prerequisite. Only SAML Sources are affected - SAML Providers and other Source types are explicitly not - and no public exploit code was identified at time of analysis, with no CISA KEV listing.
Malformed SAML messages sent to an authentik deployment that uses SAML either as an identity provider (/application/saml/*) or as a SAML source (/source/saml/*) can terminate the worker process handling the request, so every request assigned to that worker fails. No authentication or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), and because workers restart automatically and database-backed sessions survive, each message causes only a brief localised failure - sustained disruption requires a continuous stream of malicious messages, which is why the assessed availability impact is Low rather than High. Only SAML endpoints are affected; deployments using OAuth/OIDC/LDAP or other protocols are not exploitable, and no public exploit code was identified at time of analysis (CWE-770, CVSS 7.5 per the CVE record, adjusted to A:L in our independent assessment).
Authentication bypass in the Apache Airflow FAB provider (apache-airflow-providers-fab before 3.9.0) allows an attacker who holds an OIDC id_token that the same Authentik identity provider minted for a different client application to log into Airflow as the named user, because the Authentik OAuth path in the FAB auth manager never validates the token's issuer or audience claims. Only deployments using the FAB auth manager with Authentik OAuth are affected, and only where that same Authentik instance also serves at least one other application, so the attacker must already possess a valid token from that other application (the assessed vector is AV:N/AC:H/PR:L/UI:N, reflecting these gated prerequisites). Risk is high on confidentiality and integrity for exposed deployments, but the exploit path is narrow; no public exploit has been identified at time of analysis and EPSS is low at 0.14% (4th percentile), so this is a strongly gated authentication-bypass issue rather than a broad remote-takeover vector.
Account takeover in authentik (goauthentik) identity provider before 2026.2.6 and 2026.5.5 allows an attacker holding an account on an upstream SAML identity provider to hijack a victim's authentik account. By injecting an XML comment into the SAML NameID (e.g. victim<!--x-->attacker), the value authentik reads for user matching is truncated to the text before the comment while the IdP's signed assertion still validates, because comment-excluding canonicalization (xml-exc-c14n) strips the comment before the signature digest is computed. This binds the attacker's external identity to the victim's existing account without the victim's password or the IdP private key, and the malicious link persists across future logins. No public exploit identified at time of analysis; the flaw is fixed upstream and demonstrated by regression tests in the vendor patch.
Broken object-level authorization in authentik's enterprise Remote Access Control (RAC) module exposes every configured RDP, SSH, and VNC endpoint - including stored connection credentials - to any authenticated user, irrespective of their assigned application access. Versions prior to 2026.2.6 and 2026.5.5 are affected; the flaw exists in both the endpoint listing API (which omits per-user access filtering) and the connection initiation flow (which does not validate that the requested endpoint belongs to the application through which the user is launching). No public exploit has been identified at time of analysis, though the attack requires only a valid authentik account and delivers full interactive access to infrastructure the attacker was never authorized to reach.
Device trust bypass in authentik enterprise Google Chrome stages allows an authenticated attacker to skip Google Verified Access API attestation and complete authentication from an unverified device. Enterprise deployments using either the Google Chrome Endpoint stage with mode=REQUIRED or the deprecated Google Chrome Device Trust Connector (GDTC) stage are affected in all supported versions prior to 2026.2.6 and 2026.5.5. No public exploit is identified at time of analysis, but the bypass requires only that the attacker submit the stage form without triggering the verification iframe - a trivially reproducible action for any credential holder.
Privilege escalation in Authentik Security authentik through version 2026.5.6 allows an attacker holding a source-scoped SCIM provisioning token to take over any local account, including superuser accounts, by provisioning a SCIM user whose username matches an existing account. The SCIM user ingest function adopts pre-existing local accounts by username without enforcing scope boundaries, meaning a limited-privilege provisioning credential can rewrite or delete accounts entirely outside its intended scope. No public exploit has been identified at time of analysis, but the attack requires only network access and a valid SCIM token, making the exploitation bar low for any attacker who has obtained such a credential.
Privilege escalation in Authentik Security authentik through 2026.5.6 allows any holder of a source-scoped SCIM provisioning token to seize superuser control over the entire Identity Provider and permanently lock out all legitimate administrators. The root cause is the SCIM group ingest function's failure to validate whether the requesting token's source scope has authority over the target group - when an attacker provisions a SCIM group whose name matches an existing administrator group, authentik silently adopts and replaces that group's membership without authorization checks. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the high CVSS score of 8.8 and the total-takeover impact warrant immediate remediation.
Authentication bypass in authentik identity provider (versions prior to 2025.12.6, 2026.2.4, and 2026.5.1) allows remote unauthenticated attackers to circumvent the Source stage by submitting an empty POST request. With a CVSS score of 9.8 and CWE-287 (Improper Authentication), this flaw effectively defeats a core identity verification control; no public exploit identified at time of analysis, though the trivial trigger condition makes weaponization straightforward once details are widely studied.
Authentication bypass in authentik identity provider versions prior to 2025.12.6, 2026.2.4, and 2026.5.1 allows a low-privileged attacker who can modify a source connection and holds an account in one of the configured external sources to log into any account on the system. The flaw (CWE-287) carries a CVSS 8.8 rating with high impact across confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the issue is not currently listed in CISA KEV.
Cross-site scripting in authentik identity provider versions prior to 2025.12.5 and 2026.2.3 allows remote attackers to execute arbitrary JavaScript in a victim's browser by abusing the AutosubmitStage within the Simple Flow Executor (SFE). With a CVSS of 9.3 reflecting scope change and high impact to confidentiality/integrity, exploitation enables session hijacking against an identity provider, but no public exploit identified at time of analysis.
Privilege escalation in authentik identity provider versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2 allows an authenticated user holding the change_user permission to assign arbitrary groups - including superuser groups - to any target user via the PATCH /api/v3/core/users/{pk}/ endpoint. The UserSerializer skips the enable_group_superuser check enforced in the dedicated group-management paths, letting delegated user-management roles promote themselves or others to administrator-equivalent privilege. No public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV, but the trivial attack mechanics (a single PATCH request) make weaponization straightforward for any tenant that has delegated user administration.
Sensitive information disclosure in authentik (goauthentik) before 2025.12.5 and in the 2026.2.0-rc1 through 2026.2.2 branch allows any authenticated low-privilege user holding at least one OAuth2 access token to read the client_secret of confidential OAuth2 providers they previously authenticated against. The GET /api/v3/oauth2/access_tokens/ endpoint over-returns a nested provider object containing client_id and client_secret, exposing credentials that should be restricted to administrators. No public exploit has been identified at time of analysis and EPSS is negligible (0.01%), but the flaw is a straightforward credential leak requiring only a normal user session.
authentik is an open-source identity provider. [CVSS 8.8 HIGH]
Authentik Proxy Provider allows authentication bypass through malformed cookies when deployed with Traefik or Caddy as a reverse proxy, enabling attackers to access protected applications by circumventing forward authentication checks. The vulnerability stems from improper cookie validation that prevents the setting of required authentik-specific X-Authentik-* headers, potentially granting unauthorized access depending on the backend application's configuration. Affected versions prior to 2025.10.4 and 2025.12.4 are vulnerable; patches are available in the specified releases.
Code injection in authentik identity provider from 2021.3.1 through multiple versions. Users with delegated permissions can inject code. Patch available.
The LDAP Source debug API endpoint in authentik, an open-source identity provider, omits the object-level read-authorization filter present on the rest of the API prior to versions 2026.2.6 and 2026.5.5, enabling unauthenticated callers to retrieve LDAP directory metadata from any configured LDAP Source. Any network-reachable client can invoke the diagnostic action, causing the authentik server to connect to the upstream directory with its stored bind credentials and return a bounded set of distinguished names and attribute names - exposing account and group naming conventions and directory structure without disclosing attribute values. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
Open redirect in authentik's WS-Federation provider (all versions prior to 2026.2.3) allows an unauthenticated attacker to exfiltrate signed authentication assertions to attacker-controlled infrastructure by exploiting a prefix-only wreply URL validation check. Because the POST-based WS-Federation flow delivers a cryptographically signed identity assertion to whatever destination wreply specifies, successful exploitation leaks credential-bearing tokens rather than simply redirecting to a phishing page - elevating impact beyond a typical open redirect. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
SAML assertion validation in authentik's ResponseProcessor.parse() completely omits verification of the Conditions element, allowing unauthenticated remote attackers (PR:N per CVSS 4.0 vector) to replay expired SAML assertions or submit assertions originally issued for a different service provider. All authentik deployments prior to versions 2025.12.5 and 2026.2.3 that use SAML sources are affected. This is not listed in CISA KEV and no public exploit has been identified at time of analysis, but the low-complexity, network-accessible attack path against a core authentication primitive makes this a meaningful integrity risk in any SAML-federated deployment.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity.
authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token which is used for a single connection and is sent to the client in the URL. This token is intended to only be valid for the session of the user who authorized the connection, however this check is missing in versions prior to 2025.6.3 and 2025.4.3. When, for example, using RAC during a screenshare, a malicious user could access the same session by copying the URL from the shown browser. authentik 2025.4.3 and 2025.6.3 fix this issue. As a workaround, it is recommended to decrease the duration a token is valid for (in the RAC Provider settings, set Connection expiry to `minutes=5` for example). The maintainers of authentik also recommend enabling the option Delete authorization on disconnect.
authentik is an open-source identity provider. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, no authentication required.
Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source identity provider. Rated high severity (CVSS 7.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.
authentik is an open-source identity provider. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
authentik is an open-source Identity Provider. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.
authentik is an open-source Identity Provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentik is an open-source Identity Provider. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
Authentik is an open-source Identity Provider. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
authentik is an open-source Identity Provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
goauthentik is an open-source Identity Provider. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
authentik is an open-source Identity Provider. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
authentik is an open-source Identity provider focused on flexibility and versatility. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
authentik is an open-source Identity Provider focused on flexibility and versatility. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
authentik is an open-source identity provider. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.