PT-2026-7893

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.10.4 authentik versions prior to 2025.12.4 Description authentik is an open-source identity provider. A malformed cookie could bypass authentication when using forward authentication with the authentik Proxy...

authentik 代码注入漏洞

Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.8.6, 2025.10.4, and 2025.12.4 have a code injection vulnerability. This vulnerability allows users with specific permissions to execute arbitrary code through test endpoints...

PT-2026-7892

Name of the Vulnerable Software and Affected Versions authentik versions 2021.3.1 through 2025.8.6 authentik versions 2025.10.4 authentik versions 2025.12.4 Description authentik is an open-source identity provider. When using delegated permissions, a user with the permission 'Can view Property...

authentik 资源管理错误漏洞

Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 3.6.8 contained a resource management vulnerability. This vulnerability stemmed from potential issues during the processing of STARTTLS requests, allowing unverified clients to...

GHSA-4RRR-2H4V-F3J9 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2026-1207 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2025-13473 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

GHSA-33MW-Q7RJ-MJWJ vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2026-1312 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

GHSA-6426-9FV3-65X8 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2026-1285 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2026-1287 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

GHSA-2MCM-79HX-8FXW vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

GHSA-GVG8-93H5-G6QQ vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

GHSA-MWM9-4648-F68Q vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2025-14550 vulnerabilities

Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...

CVE-2022-23555

authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 2022.10.4 are vulnerable to Improper Authentication. Token reuse in invitation URLs leads to access control bypass via the use of a different enrollment flow than in the one...

CVE-2025-69226 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, awx, gitlab-cng, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, airflow, checkov, authentik, kubeflow-pipelines-visualization-server, dask-kubernetes, py3-vllm-cuda-12.4, request-1276, py3-cassandra-medusa...

CVE-2025-69224 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, awx, gitlab-cng, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, airflow, checkov, authentik, kubeflow-pipelines-visualization-server, dask-kubernetes, py3-vllm-cuda-12.4, request-1276, py3-cassandra-medusa...

CVE-2025-69227 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, awx, gitlab-cng, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, airflow, checkov, authentik, kubeflow-pipelines-visualization-server, dask-kubernetes, py3-vllm-cuda-12.4, request-1276, py3-cassandra-medusa...