version/2026.2.1
goauthentik/authentikversion/2026.2.1Mar 3, 2026by authentik-automation[bot]
Upgrading?
AI Summary
A maintenance release focusing on security, documentation, and specific fixes for Kerberos, LDAP, and OAuth2 providers.
Key Highlights
- Security backports for CVE-2026-40166, CVE-2026-40165, CVE-2026-40172, CVE-2026-41577, and GHSA-5wcc-hf24-rf5h.
- Kerberos connection logging and downgrade messages.
- OAuth2 fixes for federated providers and cross-provider token introspection.
- Revamped enterprise section in documentation.
New Features
- Fix for `get_provider` returning base class instead of subclass.
- Fix for enterprise WSFED metadata export and signing logic.
- Fix for outpost proxyv2 panic in handleSignOut.
- Fix for source icons being inverted.
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621 ## What's Changed * website/docs: update supported versions (cherry-pick #20534 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20535 * website/docs: fix upgrade link in `2026.2` release notes (cherry-pick #20539 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20542 * website/docs: remove bad logs redirect (cherry-pick #20522 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20548 * website/docs: revamp enterprise section (cherry-pick #20379 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20546 * docs: fix typos and wording in docs and integrations (cherry-pick #20550 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20563 * ci: add `reason` change to versions repo bump (cherry-pick #20562 to version-2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/20569 * internal: make http timeouts configurable (cherry-pick #20472 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20567 * packages/django-dramatiq-postgres: use fork (cherry-pick #20606 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20608 * web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20607 * crypto: fix kid legacy signal (cherry-pick #20627 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20628 * sources/ldap: add connection logging & downgrade message (cherry-pick #20519 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20636 * packages/django-dramatiq-postgres: fix worker startup on macos (cherry-pick #20637 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20641 * enterprise/wsfed: Fix metadata export and signing logic (cherry-pick #20643 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20649 * website/docs: entra id provider: add custom email domain info (cherry-pick #20444 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20660 * website/docs: kerberos: add note about caching (cherry-pick #20663 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20664 * core: fix get_provider returning base Provider instead of subclass (cherry-pick #19064 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20670 * packages/django-channels-postgres: eagerly delete messages (cherry-pick #20687 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20688 * outpost/proxyv2: prevent panic in handleSignOut (cherry-pick #20097 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20689 * website/docs: add 2025 pentest (cherry-pick #20626 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20691 * web: fix identification stage styling in compatibility mode (cherry-pick #20684 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20694 * providers/proxy: move search path to query instead of runtime parameter (cherry-pick #20662 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20693 * website/docs: add release notes for `2026.2.1` (cherry-pick #20659 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20695 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.0...version/2026.2.1
Related Repositories
public-apis/public-apis★ 491,218
A collective list of free APIs
NousResearch/hermes-agent★ 256,089
The agent that grows with you
yt-dlp/yt-dlp★ 200,265
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,562
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,700
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.