CVE-2025-53942

Go/goauthentik.io CVE-2025-53942: high

Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources

Action: Upgrade goauthentik.io to 0.0.0-20250722122105-7a4c6b9b50f8 or later.

go get goauthentik.io@v0.0.0-20250722122105-7a4c6b9b50f8

Affected

Fixed versions

Sources

• osv: GHSA-9g4j-v8w5-7x42
• https://github.com/goauthentik/authentik/security/advisories/GHSA-9g4j-v8w5-7x42
• https://nvd.nist.gov/vuln/detail/CVE-2025-53942
• https://github.com/goauthentik/authentik/commit/7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd
• https://github.com/goauthentik/authentik/commit/c3629d12bfe3d32d3dc8f85c0ee1f087a55dde8f
• https://github.com/goauthentik/authentik/commit/ce3f9e3763c1778bf3a16b98c95d10f4091436ab
• https://github.com/goauthentik/authentik

CVE-2025-53942 · published 2025-07-22T14:31:12Z · modified 2026-04-17T04:57:03.992073630Z · JSON

Go/goauthentik.io CVE-2025-53942: unknown

Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources in goauthentik.io

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3822
• https://github.com/goauthentik/authentik/security/advisories/GHSA-9g4j-v8w5-7x42
• https://nvd.nist.gov/vuln/detail/CVE-2025-53942
• https://github.com/goauthentik/authentik/commit/7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd
• https://github.com/goauthentik/authentik/commit/c3629d12bfe3d32d3dc8f85c0ee1f087a55dde8f
• https://github.com/goauthentik/authentik/commit/ce3f9e3763c1778bf3a16b98c95d10f4091436ab

CVE-2025-53942 · published 2025-08-11T17:24:51Z · modified 2026-04-17T04:57:03.992073630Z · JSON