CVE-2026-49443Disclosure(goauthentik / authentik)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch goauthentik authentik systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue has been patched in versions 2025.12.6, 2026.2.4, and 2026.5.1.

goauthentik CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

authentik

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

goauthentik

Products

authentik

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-49443 authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an… https://www.cve.org/CVERecord?id=CVE-2026-49443 ----- Traducción: CVE-2026-49443 aut… http://infoflow.cloud`
Post summary
The post announces CVE-2026-49443 for authentik, noting that versions before 2025.12.6, 2026.2.4, and 2026.5.1 allow an attacker to change a source connection, but it offers no PoC, exploit, or patch details.
0000036
79 followersView on X
CVE@CVEnew137d
Patch
CVE-2026-49443 authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an… https://www.cve.org/CVERecord?id=CVE-2026-49443
Post summary
The CVE‑2026‑49443 vulnerability in authentik has been addressed in newer releases, as indicated by the specified affected and fixed versions; no PoC, exploit, or active exploitation is mentioned.
00000228
57.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	goauthentik	authentik	-	-	-

Explore more

Back to dashboard goauthentik CVEs authentik vulnerabilities