Impact Score: 5/10
authentik: Release 2025.2.3
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2025.2.3. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.2#fixed-in-202523
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (5)
- admin: fix system API when using bearer token (cherry-pick #13651)
- outposts/ldap: fix paginator going into infinite loop (cherry-pick #13677)
- core: fix core/user is_superuser filter (cherry-pick #13693)
- core: fix non-exploitable open redirect (cherry-pick #13696)
- security: fix CVE-2025-29928 (cherry-pick #13695)
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2025.2#fixed-in-202523
## What's Changed
* admin: fix system API when using bearer token (cherry-pick #13651) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13654
* stages/email: Clean newline characters in TemplateEmailMessage (cherry-pick #13666) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13667
* outposts/ldap: fix paginator going into infinite loop (cherry-pick #13677) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13679
* web/admin: reworked sync status card (cherry-pick #13625) by @rissson in https://github.com/goauthentik/authentik/pull/13692
* core: fix core/user is_superuser filter (cherry-pick #13693) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13694
* core: fix non-exploitable open redirect (cherry-pick #13696) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13698
* stages/identification: refresh captcha on failure (cherry-pick #13697) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13699
* security: fix CVE-2025-29928 (cherry-pick #13695) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13700
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.2.2...version/2025.2.3