What’s Vulnerable › Products

goauthentik authentik vulnerabilities

45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.

Check whether your goauthentik authentik version is affected

Latest goauthentik authentik vulnerabilities

• CVE-2026-94613 — authentik: Denial of Service via Document Type Declarations in SAML Messages (CVSS 7.5)
• CVE-2026-94612 — authentik: Authentication bypass via assertion confusion in SAML sources (CVSS 7.4)
• CVE-2026-94611 — authentik: Stored credentials are readable with view permission alone (CVSS 8.1)
• CVE-2026-94609 — authentik: Privilege Escalation to Superuser via Group Hierarchy (CVSS 8.8)
• CVE-2026-94606 — authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage (CVSS 8.9)
• CVE-2026-61574 — authentik RAC: access any endpoint via an unrelated application (CVSS 8.8)
• CVE-2026-57580 — authentik: Account Takeover via SAML NameID Comment Truncation (CVSS 9.4)
• CVE-2026-55106 — authentik: Unauthenticated LDAP directory data disclosure (CVSS 5.3)
• CVE-2026-54730 — authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView (CVSS 8.6)
• CVE-2026-49448 — authentik: SourceStage bypass via empty POST (CVSS 9.8)
• CVE-2026-49443 — authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API (CVSS 8.8)
• CVE-2026-47201 — authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user (CVSS 8.5)
• CVE-2026-42849 — authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover (CVSS 9.3)
• CVE-2026-41569 — authentik: WS-Federation wreply origin bypass can exfiltrate signed login responses to attacker-controlled endpoints (CVSS 6.1)
• CVE-2026-41577 — authentik: SAML source does not validate Conditions, timing, or audience on assertions (CVSS 7.5)
• CVE-2026-40172 — authentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser (CVSS 8.1)
• CVE-2026-40166 — authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/ (CVSS 7.1)
• CVE-2026-40165 — authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation (CVSS 8.7)
• CVE-2026-25922 — authentik has a Signature Verification Bypass via SAML Assertion Wrapping (CVSS 8.8)
• CVE-2026-25748 — authentik has a forward authentication bypass with broken cookie (CVSS 7.5)
• CVE-2026-25227 — authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint (CVSS 7.2)
• CVE-2025-64708 — authentik invitation expiry is delayed by at least 5 minutes (CVSS 5.3)
• CVE-2025-64521 — authentik deactivated service accounts can authenticate to OAuth (CVSS 4.8)
• CVE-2025-53942 — authentik has an insufficient check for account active status during OAuth/SAML authentication (CVSS 7.4)
• CVE-2025-52553 — authentik has Insufficient Session verification for Remote Access Control endpoint access (CVSS 9.6)