authentik version/2026.8.2 released on 09-09-2026
authentik version/2026.8.2 is out now. Operators and administrators benefit from security hardening and fixes that address access-control and permission-check logic, plus session and token handling improvements to reduce leakage and session fixation risks.
Visit the official documentation and release notes for full details, upgrade instructions and the deployment guidance included with this release.
What’s in this release
- Patches to access-control and permission-check logic to close security gaps.
- Session and token handling fixes to reduce leakage and mitigate session fixation risks.
- Reliability and interoperability fixes for OAuth/OIDC (redirect/PKCE, refresh-token and token-revocation edge cases) and improved stability for SAML, LDAP, SCIM and social providers.
Upgrade notes
- Follow the deployment and upgrade guidance in the release documentation for container/image tags, any required schema migrations and configuration checks; recommended rollout strategies include canary or rolling updates.
- Ensure backups before upgrading and validate SSO flows and admin workflows after the update; have rollback procedures ready as described in the upgrade notes.
Share your experience after upgrading and report any issues you encounter so others can benefit from the testing and feedback.
