authentik version/2026.8.3 released on 17-09-2026
authentik version/2026.8.3 is out now. Operators and administrators will see improved search and admin UX, a range of security and stability fixes to core components and providers, and more consistent outpost/proxy session behaviour.
See the full changelog on the project’s GitHub or the release notes on the documentation site for full details and upgrade guidance.
What’s in this release
- Admin file search is now case-insensitive, making file discovery in the admin more reliable (admin/files).
- Core and security fixes: corrected version-2026.8 database migrations, fixed multiprocess metric gauges, documented the CNA in SECURITY.md, and hardened OAuth/OAuth2 handling (token exchange when no signing key; only URL-based avatars exposed as picture claim).
- Outposts and proxying improvements: sessions refresh when impersonation changes, websocket close codes are preserved when proxying to outposts, and events/logging now note when an agent makes calls.
Upgrade notes
- Apply the corrected database migrations for the 2026.8 series as part of your upgrade; verify migrations complete in a staging environment before upgrading production.
- If you need to roll back, revert to version/2026.8.2 using your existing rollback procedure and consult the full GitHub changelog for exact diffs.
Share your experience or raise issues on the project’s GitHub so maintainers can see real-world impacts and follow up.
