BIT-AUTHENTIK-2026-49443 authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue has been patched in versions 2025.12.6, 2026.2.4, an...

CVE-2026-49443 authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue has been patched in versions 2025.12.6, 2026.2.4, an...

CVE-2026-49443 authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue has been patched in versions 2025.12.6, 2026.2.4, an...

CVE-2026-49443

This CVE affects authentik, an open-source identity provider. Affected: UserSourceConnection.user and GroupSourceConnection.group are changeable via the API, allowing an attacker who can modify a source connection and possesses an account in one configured source to log into any account. Root cau...

CVE-2025-46741

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15948 2025-05-12 18:26:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15967...

CVE-2024-53054

creationtimestamp| type| source ---|---|--- 2024-11-29 09:21:27+00:00| seen| https://infosec.exchange/users/adulau/statuses/113565505029214938...

CVE-2024-7747

creationtimestamp| type| source ---|---|--- 2024-11-28 13:08:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113560734424644693...

CVE-2023-27078

creationtimestamp| type| source ---|---|--- 2023-03-23 17:41:47+00:00| seen| https://t.me/cibsecurity/60573...

CVE-2022-23195

creationtimestamp| type| source ---|---|--- 2022-02-16 20:36:07+00:00| seen| https://t.me/cibsecurity/37583...

CVE-2019-7755

creationtimestamp| type| source ---|---|--- 2020-03-30 20:47:29+00:00| seen| https://t.me/cibsecurity/10833...