Skip to content

security: CVE-2026-25922 (2026.2)#20238

Merged
rissson merged 1 commit intoversion-2026.2from
int-backport/authentik-2026.2/CVE-2026-25922.sec.patch
Feb 12, 2026
Merged

security: CVE-2026-25922 (2026.2)#20238
rissson merged 1 commit intoversion-2026.2from
int-backport/authentik-2026.2/CVE-2026-25922.sec.patch

Conversation

@authentik-automation
Copy link
Contributor

@authentik-automation authentik-automation bot commented Feb 12, 2026 •
edited by rissson
Loading

@authentik-automation authentik-automation bot requested review from a team as code owners February 12, 2026 14:05
@rissson rissson changed the title internal: Automated internal backport: CVE-2026-25922.sec.patch to authentik-2026.2 security: CVE-2026-25922 (2026.2) Feb 12, 2026
@codecov
Copy link

codecov bot commented Feb 12, 2026 •
edited
Loading

Codecov Report

❌ Patch coverage is 96.15385% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 93.33%. Comparing base (fdbf9ff) to head (58d0cb8).
⚠️ Report is 3 commits behind head on version-2026.2.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
authentik/sources/saml/processors/response.py 90.90% 1 Missing ⚠️
Additional details and impacted files 
@@               Coverage Diff               @@
##           version-2026.2   #20238   +/-   ##
===============================================
  Coverage           93.32%   93.33%           
===============================================
  Files                 978      978           
  Lines               54544    54565   +21     
===============================================
+ Hits                50905    50930   +25     
+ Misses               3639     3635    -4
Flag Coverage Δ
conformance 37.74% <15.38%> (-0.01%) ⬇️
e2e 43.62% <26.92%> (-0.01%) ⬇️
integration 22.56% <7.69%> (-0.01%) ⬇️
unit 91.51% <96.15%> (+<0.01%) ⬆️
unit-migrate 91.55% <96.15%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@rissson rissson merged commit 30670c9 into version-2026.2 Feb 12, 2026
83 of 87 checks passed
@rissson rissson deleted the int-backport/authentik-2026.2/CVE-2026-25922.sec.patch branch February 12, 2026 14:27
@netlify
Copy link

netlify bot commented Feb 12, 2026

✅ Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit 58d0cb8
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/698dde46b0b97e00084ecd9d
😎 Deploy Preview https://deploy-preview-20238--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Feb 12, 2026

✅ Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 58d0cb8
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/698dde469cbb4e0008e6639c
😎 Deploy Preview https://deploy-preview-20238--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions
Copy link
Contributor

github-actions bot commented Feb 12, 2026

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-58d0cb8e31d21b021efa889552360586684fb637
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-58d0cb8e31d21b021efa889552360586684fb637

Afterwards, run the upgrade commands from the latest release notes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

cherry-pick

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rissson