version/2026.2.4
goauthentik/authentikversion/2026.2.4May 28, 2026by authentik-automation[bot]
Upgrading?
AI Summary
This maintenance release focuses on patching security vulnerabilities, specifically CVE-2026-40166 and several GHSA identifiers, while refining MTLS certificate handling and Outpost state tracking.
Key Highlights
- Security backports for CVE-2026-40166 and GHSA-c3m2-jqmq-pvp3, GHSA-wr38-7xg8-fqxr, and GHSA-xp7f-xjjx-gwm8.
- Fixes for MTLS certificate expiration logic and Outpost state version reporting.
- Updates to FIPS Python container versions and SSH hostkey lookup for federated auth.
- Bug fixes for Radius EAP debug logging and Django filter functions.
New Features
- Fix for `filter_not_expired` not accepting positional arguments.
- Fix for eap debug logging in Radius providers.
- Fix for CI documentation setup regarding JS version.
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202624 ## What's Changed * endpoints: remove `print` line (cherry-pick #22325 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22326 * website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22333 * enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22414 * enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22500 * outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22504 * website/docs: add global to values.yaml snippets and update version (cherry-pick #22524 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22530 * core: bump goauthentik/fips-python from 3.14.3-slim-trixie-fips to 3.14.5-slim-trixie-fips in /lifecycle/container (cherry-pick #22518 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22528 * endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (cherry-pick #22594 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22596 * providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22578 * core: fix filter_not_expired not accepting positional arguments (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/22690 * ci: fix docs not having correct js version setup (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/22716 * tenants: fix test teardown (version-2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/22715 * security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22726 * security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22727 * security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22728 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.3...version/2026.2.4
Related Repositories
public-apis/public-apis★ 491,206
A collective list of free APIs
NousResearch/hermes-agent★ 256,070
The agent that grows with you
yt-dlp/yt-dlp★ 200,240
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,555
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.