Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious cookie was used, none of the authentik-specific X-Authentik-* headers were set which depending on application can grant access to an attacker. authentik 2025.10.4 and 2025.12.4 fix this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-12 | 2 | Disclosure2 |
| 2026-02-13 | 1 | Disclosure1 |
| 2026-02-14 | 1 | Patch1 |
CVE-2026-25748 Authentication Bypass in authentik Proxy Provider with Malformed Cookies https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25748
Post summary
The text announces CVE‑2026‑25748, detailing an authentication bypass in authentik Proxy Provider caused by malformed cookies, but provides no evidence of PoC, exploit, or mitigation.
[CVE-2026-25748: HIGH] Authentik identity provider had a security vulnerability allowing authentication bypass with malicious cookies when integrated with Traefik or Caddy as reverse proxy. Fixed in versions...#cve,CVE-2026-25748,#cybersecurity https://cvefind.com/CVE-2026-25748
Post summary
The post discloses a high‑severity authentication bypass vulnerability in Authentik when used with Traefik or Caddy reverse proxies, notes that a fix exists, and provides a link to the CVE record.
CVE-2026-25748 authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward a… https://www.cve.org/CVERecord?id=CVE-2026-25748
Post summary
CVE‑2026‑25748 enables authentication bypass in authentik via a malformed cookie; the issue was mitigated in releases 2025.10.4 and 2025.12.4.
`Authentik` users should note a forward authentication bypass (CVE-2026-25748) due to a broken cookie mechanism. Update to patched versions to prevent unauthorized access. #Authentik #AuthBypass #InfoSec https://www.pulsepatch.io/posts/cve-2026-25748-authentik-auth-bypass
Post summary
Authentik users are warned of an authentication bypass vulnerability (CVE-2026-25748) caused by a broken cookie mechanism; updating to patched versions is advised to prevent unauthorized access.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | goauthentik | authentik | - | - | - |