OAuth/SAML Vulnerability in authentik Identity Provider

CVE-2025-53942

What is CVE-2025-53942?

The authentik Identity Provider, known for its flexibility and support of various protocols, has a vulnerability affecting users who have been deactivated but still maintain partial access to certain functionalities. Users who registered through OAuth or SAML or linked their accounts to these providers can experience a state where they are unable to access the API but can authorize applications, thus posing a security risk. To resolve this issue, it is recommended that developers implement an expression policy during the login stage that verifies the user's active status, effectively preventing unauthorized access. This vulnerability has been addressed in later versions, specifically 2025.6.4.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References