570 matches found
CVE-2026-25227
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
CVE-2026-25227 authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
CVE-2026-25227 authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
authentik 数据伪造问题漏洞
Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.8.6, 2025.10.4, and 2025.12.4 had a data manipulation vulnerability. This vulnerability arises from the use of certain configured SAML sources, allowing attackers to inject...
PT-2026-7893
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.10.4 authentik versions prior to 2025.12.4 Description authentik is an open-source identity provider. A malformed cookie could bypass authentication when using forward authentication with the authentik Proxy...
authentik 授权问题漏洞
Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.10.4 and 2025.12.4 contained vulnerabilities related to authorization. These vulnerabilities stemmed from the possibility of bypassing authentication when using malformed...
authentik 代码注入漏洞
Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.8.6, 2025.10.4, and 2025.12.4 have a code injection vulnerability. This vulnerability allows users with specific permissions to execute arbitrary code through test endpoints...
PT-2026-7892
Name of the Vulnerable Software and Affected Versions authentik versions 2021.3.1 through 2025.8.6 authentik versions 2025.10.4 authentik versions 2025.12.4 Description authentik is an open-source identity provider. When using delegated permissions, a user with the permission 'Can view Property...
authentik 资源管理错误漏洞
Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 3.6.8 contained a resource management vulnerability. This vulnerability stemmed from potential issues during the processing of STARTTLS requests, allowing unverified clients to...
CVE-2026-25922: Improper Authentication
authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signature under Verification Certificate enabled and not Verify Response Signature, or does not have the Encryption Certificate setting under...
CVE-2026-25748: Improper Authentication
authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious...
CVE-2026-25227: Improper Control of Generation of Code
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
CVE-2026-1207 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...
GHSA-4RRR-2H4V-F3J9 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...
CVE-2025-13473 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...
CVE-2026-1312 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...
GHSA-6426-9FV3-65X8 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...
GHSA-33MW-Q7RJ-MJWJ vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, authentik, label-studio...