Known vulnerabilities in authentik 2026.5.4

Vendor: Authentik Security Inc
Software: authentik
Version: 2026.5.4
Software CPE: cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*
Website: https://goauthentik.io/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting authentik version 2026.5.4 authentik 2026.5.4 is affected by 5 vulnerabilities: 1 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138386 - Missing Authorization
 CWE-862 Low
No
No
 2026.2.6, 2026.5.5 17.07.2026 SB20260717100
#VU138385 - Improper Access Control
CVE-2026-54730		 CWE-284 Low
No
No
 2026.2.6, 2026.5.5 17.07.2026 SB20260717100
#VU138384 - Authorization Bypass Through User-Controlled Key
CVE-2026-61574		 CWE-639 Medium
No
No
 2026.2.6, 2026.5.5 17.07.2026 SB20260717100
#VU138383 - Improper Access Control
CVE-2026-55106		 CWE-284 Medium
No
No
 2026.2.6, 2026.5.5 17.07.2026 SB20260717100
#VU138382 - Interpretation Conflict
CVE-2026-57580		 CWE-436 High
No
No
 2026.2.6, 2026.5.5 17.07.2026 SB20260717100