authentik version/2026.5.5 released on 15-07-2026
authentik version/2026.5.5 is out now. Operators and administrators should upgrade to pick up multiple automated security backports and a series of Web UI, flows and integration fixes that improve reliability and admin visibility.
See the project’s GitHub release notes and the official documentation for upgrade instructions and the full changelog.
What’s in this release
- Security backports: automated internal backports of patches 1822, 1817, 1887, 1919 and 1934 applied to the 2026.5 branch to address known vulnerabilities.
- Web UI and flows: fixes for a race condition in continuous login, support for source stages in authentication flows, repaired table refresh and Log Viewer behaviour, added licensing usage totals in the admin UI, and corrected expiry text in password reset emails.
- Integrations, providers and sync: migrated openid_conformance tests to upstream images; handled exceptions during connector-controller sync setup; improved SCIM error display; stopped repeated discovery during outgoing sync; improved Apple id_token validation; and ensured the django-dramatiq-postgres broker closes unusable PostgreSQL connections.
Upgrade notes
- No breaking changes are listed for version/2026.5.5; upgrading is recommended to receive the security fixes—follow the project’s upgrade guide on the authentik documentation or the GitHub release page.
- If you need to roll back, revert to version/2026.5.4 and consult the full changelog on GitHub (compare version/2026.5.4…version/2026.5.5).
Share any feedback or problems via the project’s GitHub issues so maintainers and the community can investigate.
