PyPI/authentik-client CVE-2025-64521: medium 4.8, EPSS 0.23%
authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with client_id and client_secret to an OAuth provider, authentik creates a service account
Action: Upgrade authentik-client to 2025.8.5 or later.
pip install authentik-client==2025.8.5pip install authentik-client==2025.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2025.8.0 | 2025.8.5 | - |
| 2025.10.0 | 2025.10.2 | - |
Fixed versions
| 2025.8.5 | 2025.10.2 |
Sources
- osv: PYSEC-2025-237
- https://github.com/goauthentik/authentik/commit/9dbdfc3f1be0f1be36f8efce2442897b2a54a71c
- https://github.com/goauthentik/authentik/security/advisories/GHSA-xr73-jq5p-ch8r
CVE-2025-64521 · published · modified · JSON