Go/goauthentik.io CVE-2025-53942: high 7.4, EPSS 0.58%

Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources

Action: Upgrade goauthentik.io to 0.0.0-20250722122105-7a4c6b9b50f8 or later.

go get goauthentik.io@v0.0.0-20250722122105-7a4c6b9b50f8

Affected

Fixed versions

Sources

• osv: GHSA-9g4j-v8w5-7x42
• nvd: CVE-2025-53942
• https://github.com/goauthentik/authentik/security/advisories/GHSA-9g4j-v8w5-7x42
• https://github.com/goauthentik/authentik/commit/7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd
• https://github.com/goauthentik/authentik/commit/c3629d12bfe3d32d3dc8f85c0ee1f087a55dde8f
• https://github.com/goauthentik/authentik/commit/ce3f9e3763c1778bf3a16b98c95d10f4091436ab
• https://github.com/goauthentik/authentik

CVE-2025-53942 · published 2025-07-22T14:31:12Z · modified 2026-04-17T04:57:03.992073630Z · JSON