Skip to content

security: CVE-2026-25748 (2025.12)#20231

Merged
rissson merged 1 commit intoversion-2025.12from
int-backport/authentik-2025.12/CVE-2026-25748.sec.patch
Feb 12, 2026
Merged

security: CVE-2026-25748 (2025.12)#20231
rissson merged 1 commit intoversion-2025.12from
int-backport/authentik-2025.12/CVE-2026-25748.sec.patch

Conversation

@authentik-automation
Copy link
Contributor

@authentik-automation authentik-automation bot commented Feb 12, 2026

@codecov
Copy link

codecov bot commented Feb 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.27%. Comparing base (0cabb23) to head (2de427e).
⚠️ Report is 3 commits behind head on version-2025.12.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@                 Coverage Diff                 @@
##           version-2025.12   #20231      +/-   ##
===================================================
+ Coverage            93.03%   93.27%   +0.23%     
===================================================
  Files                  947      947              
  Lines                52561    52561              
===================================================
+ Hits                 48902    49026     +124     
+ Misses                3659     3535     -124     
Flag Coverage Δ
e2e 44.39% <ø> (+0.62%) ⬆️
integration 23.53% <ø> (+<0.01%) ⬆️
unit 91.57% <ø> (+<0.01%) ⬆️
unit-migrate 91.61% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@rissson rissson changed the title internal: Automated internal backport: CVE-2026-25748.sec.patch to authentik-2025.12 security: CVE-2026-25748 (2025.12) Feb 12, 2026
@netlify
Copy link

netlify bot commented Feb 12, 2026

Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit 2de427e
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/698dde2264fc730008d980e5
😎 Deploy Preview https://deploy-preview-20231--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Feb 12, 2026

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 2de427e
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/698dde2268256000085afb40
😎 Deploy Preview https://deploy-preview-20231--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@rissson rissson merged commit ff87e5c into version-2025.12 Feb 12, 2026
79 of 83 checks passed
@rissson rissson deleted the int-backport/authentik-2025.12/CVE-2026-25748.sec.patch branch February 12, 2026 14:25
@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-2de427e94ec4eb415fe805bf018b4dfc1913de59
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-2de427e94ec4eb415fe805bf018b4dfc1913de59

Afterwards, run the upgrade commands from the latest release notes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant