🔐 CVE Alert

CVE-2026-94613

HIGH 7.5

authentik: Denial of Service via Document Type Declarations in SAML Messages

CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling /application/saml/* or /source/saml/*, causing the requests assigned to that worker to fail. Worker process termination and automatic restart do not destroy database-backed sessions, but continued malicious messages can cause a sustained share of legitimate traffic to fail. Other protocol implementations are not affected. This issue is fixed in versions 2026.2.7, 2026.5.7, and 2026.8.2.

CWE CWE-770
Vendor goauthentik
Product authentik
Published Sep 24, 2026
Stay Ahead of the Next One

Get instant alerts for goauthentik authentik

Be the first to know when new high vulnerabilities affecting goauthentik authentik are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

goauthentik / authentik
< 2026.2.7 >= 2026.5.0, < 2026.5.7 >= 2026.8.0, < 2026.8.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/goauthentik/authentik/security/advisories/GHSA-cxwx-9x59-28qm github.com: https://github.com/goauthentik/authentik/pull/25959 github.com: https://github.com/goauthentik/authentik/pull/25964 github.com: https://github.com/goauthentik/authentik/pull/25969 github.com: https://github.com/goauthentik/authentik/pull/25974 github.com: https://github.com/goauthentik/authentik/commit/03d19d63b8d8dd7bc3de7cf6e57c6df341a9fc86 github.com: https://github.com/goauthentik/authentik/commit/4cf2f803b1c2ef38c224eead375fd057a10ee8ac github.com: https://github.com/goauthentik/authentik/commit/732adad26bb97361b6bf25ef138df5c16471ba1f github.com: https://github.com/goauthentik/authentik/commit/a029f5372295bfeb1e334855f78601681cdc9a2d docs.goauthentik.io: https://docs.goauthentik.io/releases/2026.2#fixed-in-202627 docs.goauthentik.io: https://docs.goauthentik.io/releases/2026.5#fixed-in-202657 docs.goauthentik.io: https://docs.goauthentik.io/releases/2026.8#fixed-in-202682 github.com: https://github.com/goauthentik/authentik/releases/tag/version/2026.2.7 github.com: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.7 github.com: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.2