SAML Assertion Vulnerability in authentik Identity Provider

CVE-2026-25922

What is CVE-2026-25922?

The authentik identity provider, before versions 2025.8.6, 2025.10.4, and 2025.12.4, is susceptible to a vulnerability due to improper configuration. When utilizing a SAML Source with the Verify Assertion Signature option enabled but not the Verify Response Signature, or without the Encryption Certificate set up, an attacker could inject a malicious assertion preceding the signed assertion utilized by authentik. This flaw emphasizes the importance of correct protocol settings in safeguarding against unauthorized access and data breaches.

References