version/2026.5.2
goauthentik/authentikversion/2026.5.2May 28, 2026by authentik-automation[bot]
Upgrading?
AI Summary
This release for the 2026.5 branch focuses on security fixes and bug fixes related to database connections and OAuth2 session handling. It includes fixes for connection spinning, certificate file path handling, and session decoding from previous versions, alongside automated security backports.
Key Highlights
- Security backports for three GitHub Security Advisories.
- Fixes to database connection spinning and certificate file path handling.
- OAuth2 session decode fix for upgrades from version 2026.2.
- Improvements to RADIUS EAP debug logging and event deprecation handling.
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202652 ## What's Changed * website/docs: Fix release notes cards (cherry-pick #22554 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22555 * root: update security release versions (cherry-pick #22583 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22591 * endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (cherry-pick #22594 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22597 * website/docs: Bump package-lock by @GirlBossRush in https://github.com/goauthentik/authentik/pull/22552 * providers/radius: fix eap debug logging (cherry-pick #22551 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22579 * events: fix Event.log_deprecation not checking that cause is a string (cherry-pick #22598 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22683 * packages/ak-common/db: fix conn_max_age causing spinning (cherry-pick #22679 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22686 * packages/ak-common/db: fix certificates options not allowing file paths (cherry-pick #22680 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22685 * providers/oauth2: fix session decode when upgrading from 2026.2 (cherry-pick #22684 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22692 * enterprise/providers/scim: fix last_updated for OAuth interactive (cherry-pick #22678 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22700 * security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22729 * security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22730 * security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22731 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.5.0...version/2026.5.2
Related Repositories
public-apis/public-apis★ 491,206
A collective list of free APIs
NousResearch/hermes-agent★ 256,070
The agent that grows with you
yt-dlp/yt-dlp★ 200,240
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,555
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.