Skip to content

security: CVE-2026-25748 (2026.2)#20237

Merged
rissson merged 1 commit intoversion-2026.2from
int-backport/authentik-2026.2/CVE-2026-25748.sec.patch
Feb 12, 2026
Merged

security: CVE-2026-25748 (2026.2)#20237
rissson merged 1 commit intoversion-2026.2from
int-backport/authentik-2026.2/CVE-2026-25748.sec.patch

Conversation

@authentik-automation
Copy link
Contributor

@authentik-automation authentik-automation bot commented Feb 12, 2026

@authentik-automation authentik-automation bot requested a review from a team as a code owner February 12, 2026 14:05
@rissson rissson changed the title internal: Automated internal backport: CVE-2026-25748.sec.patch to authentik-2026.2 security: CVE-2026-25748 (2026.2) Feb 12, 2026
@codecov
Copy link

codecov bot commented Feb 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.31%. Comparing base (fdbf9ff) to head (4f3b04c).
⚠️ Report is 3 commits behind head on version-2026.2.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@                Coverage Diff                 @@
##           version-2026.2   #20237      +/-   ##
==================================================
- Coverage           93.32%   93.31%   -0.01%     
==================================================
  Files                 978      978              
  Lines               54544    54544              
==================================================
- Hits                50905    50900       -5     
- Misses               3639     3644       +5     
Flag Coverage Δ
conformance 37.75% <ø> (+<0.01%) ⬆️
e2e 43.62% <ø> (ø)
integration 22.57% <ø> (+<0.01%) ⬆️
unit 91.49% <ø> (-0.02%) ⬇️
unit-migrate 91.52% <ø> (-0.02%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@netlify
Copy link

netlify bot commented Feb 12, 2026

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 4f3b04c
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/698dde433baa4b0009ae585e
😎 Deploy Preview https://deploy-preview-20237--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Feb 12, 2026

Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit 4f3b04c
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/698dde433ffe5700088d3e40
😎 Deploy Preview https://deploy-preview-20237--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@rissson rissson merged commit bb5bc5c into version-2026.2 Feb 12, 2026
83 of 87 checks passed
@rissson rissson deleted the int-backport/authentik-2026.2/CVE-2026-25748.sec.patch branch February 12, 2026 14:27
@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-4f3b04ce77b1fd903687c862f3b22b15ed2cf1a3
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-4f3b04ce77b1fd903687c862f3b22b15ed2cf1a3

Afterwards, run the upgrade commands from the latest release notes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant