CVE-2026-41569

authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper URL parsing. An attacker who can craft a login link can supply a wreply value on a different origin that passes the check (e.g. https://portal.example.com.evil.tld/), causing the victim's browser to POST the signed WS-Federation login response to attacker-controlled infrastructure. This issue has been patched in version 2026.2.3.

• CWE-601

• https://github.com/goauthentik/authentik/security/advisories/GHSA-995q-72cw-cfw3Mitigation, Vendor Advisory

Published

Jun 2, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4156ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overfl…7.5
• CVE-2026-41564CryptX versions before 0.088 for Perl do not reseed the Cryp…7.5
• CVE-2026-41565CryptX versions before 0.088_001 for Perl have a stack buffe…7.5
• CVE-2026-41566Improper Handling of Insufficient Permissions or Privileges …9.4
• CVE-2026-41567Moby is an open source container framework. In versions prio…7.2
• CVE-2026-41568Moby is an open source container framework. In Docker Engine…6.1
• CVE-2026-4157ChargePoint Home Flex revssh Service Command Injection Remot…7.5
• CVE-2026-41570PHPUnit is a testing framework for PHP. In versions 12.5.21 …7.8
• CVE-2026-41571Note Mark is an open-source note-taking application. In vers…9.4
• CVE-2026-41572Note Mark is an open-source note-taking application. Prior t…5.3
• CVE-2026-41573Open Access Management (OpenAM) is an access management solu…7.1
• CVE-2026-41574Nhost is an open source Firebase alternative with GraphQL. P…9.8