Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

goauthentik/authentik

              main @ 0bd9f8e
            

348

Fixes

CVEs

CRITICAL

Peak severity

42.9%

Coverage

Highlights

Auth Bypass: 188 prior fixes. Scrutinize any change in this area.

authentik/providers/oauth2/views/token.py: most-fixed (13 issues). Treat as high-risk during review.

188 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Attackers can bypass authentication completely by sending empty POST requests during the Source stage, causing the flow engine to skip validation checks and mark the stage as successful. This vulnerability is tracked under CVE-2026-49448.

SAML Signature Bypass: Improper validation of signature Reference URIs and target IDs allowed XML signature wrapping attacks. Attackers could inject malicious assertions into SAML responses to bypass signature verification mechanisms entirely (CVE-2026-25922).

Privilege Escalation: Under CVE-2024-37905, authenticated users could modify the owner (user) field of existing API tokens within serializers because the fields were not validated as read-only, leading directly to admin account takeover.