Impact Score: 5/10
authentik: Release 2026.2.4
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2026.2.4. Source highlight: See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202624
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (1)
- website/docs: add global to values.yaml snippets and update version (cherry-pick #22524 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22530
🔧 Bug Fixes & Patches (6)
- website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22333
- enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22500
- outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22504
- providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22578
- core: fix filter_not_expired not accepting positional arguments (2026.2)
- ci: fix docs not having correct js version setup (2026.2)
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202624
## What's Changed
* endpoints: remove `print` line (cherry-pick #22325 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22326
* website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22333
* enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22414
* enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22500
* outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22504
* website/docs: add global to values.yaml snippets and update version (cherry-pick #22524 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22530
* core: bump goauthentik/fips-python from 3.14.3-slim-trixie-fips to 3.14.5-slim-trixie-fips in /lifecycle/container (cherry-pick #22518 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22528
* endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (cherry-pick #22594 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22596
* providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22578
* core: fix filter_not_expired not accepting positional arguments (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/22690
* ci: fix docs not having correct js version setup (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/22716
* tenants: fix test teardown (version-2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/22715
* security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22726
* security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22727
* security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22728
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.3...version/2026.2.4