We'll be publishing four security Issues (CVE-2026-25922, CVE-2026-25748, CVE-2026-25227 and CVE-2026-25886) and accompanying fixes on 2026-02-12, 14:00 UTC with the Severity level High, High, Critical and Moderate. Fixed versions 2025.8.6, 2025.10.4 and 2025.12.4 will be released alongside a partial workaround for previous versions. For more info, see the authentik Security policy here:
https://goauthentik.io/docs/security/policy.