Impact Score: 5/10
authentik: Release 2026.5.2
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2026.5.2. Source highlight: See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202652
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- website/docs: Fix release notes cards (cherry-pick #22554 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22555
- providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22579
- events: fix Event.log_deprecation not checking that cause is a string (cherry-pick #22598 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22683
- packages/ak-common/db: fix conn_max_age causing spinning (cherry-pick #22679 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22686
- packages/ak-common/db: fix certificates options not allowing file paths (cherry-pick #22680 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22685
- providers/oauth2: fix session decode when upgrading from 2026.2 (cherry-pick #22684 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22692
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202652
## What's Changed
* website/docs: Fix release notes cards (cherry-pick #22554 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22555
* root: update security release versions (cherry-pick #22583 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22591
* endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (cherry-pick #22594 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22597
* website/docs: Bump package-lock by @GirlBossRush in https://github.com/goauthentik/authentik/pull/22552
* providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22579
* events: fix Event.log_deprecation not checking that cause is a string (cherry-pick #22598 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22683
* packages/ak-common/db: fix conn_max_age causing spinning (cherry-pick #22679 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22686
* packages/ak-common/db: fix certificates options not allowing file paths (cherry-pick #22680 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22685
* providers/oauth2: fix session decode when upgrading from 2026.2 (cherry-pick #22684 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22692
* enterprise/providers/scim: fix last_updated for OAuth interactive (cherry-pick #22678 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22700
* security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22729
* security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22730
* security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22731
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.5.0...version/2026.5.2