goauthentik Release 2026.5.5 Security Update: OAuth id_token validation and password reset fixes

Vulnerability Overview In version of , several security-related issues exist that may impact the security and stability of the system. Affected Scope Test Environment: Migration to upstream images in may affect the stability of the test environment. Connector Synchronization: Exception handling in the connector controller synchronization settings may affect connector synchronization functionality. Authentication Flow: Fix for stage conditions for source support in continuous login and authentication flows within may affect the accuracy of the authentication process. Web Interface: - : Fix for the table refresh button not updating table data may affect user interface operations. - : Addition of total license usage may affect information display in the admin interface. - : Fix for IntersectionObserver issues in Log Viewer may affect the log viewing functionality. Password Reset: Fix for unreasonable expiration times in the password reset template within may affect the security of the password reset functionality. Documentation Updates: Multiple documentation updates may affect users' understanding and usage of new features. Error Handling: Fix for error display issues within may affect the accuracy of error messages. Logging: Fix for page discovery run issues within may affect the accuracy of log recording. Preview Tags: Removal of the 2026.5 preview tag from Nils site documentation within may affect the accuracy of the documentation. Query Support: Addition of support for numbers and booleans in AQL queries on JSON fields within may affect the accuracy of search functionality. Token Validation: Improvement of validation for Apple sources within may affect the security of OAuth authentication. Database Connection: Fix for unavailable PostgreSQL connections within may affect the stability of database connections. Security Patches: Automated internal backups of multiple security patches may affect system security. Remediation Measures Test Environment: Migrate to upstream images to ensure the stability of the test environment. Connector Synchronization: Handle exceptions in the connector controller synchronization settings to ensure normal operation of connector synchronization functionality. Authentication Flow: Fix stage conditions for source support in continuous login and authentication flows to ensure the accuracy of the authentication process. Web Interface: - Fix the issue where the table refresh button does not update table data to ensure normal user interface operations. - Add total license usage to ensure accurate display of information in the admin interface. - Fix IntersectionObserver issues in Log Viewer to ensure normal log viewing functionality. Password Reset: Fix unreasonable expiration times in the password reset template to ensure the security of the password reset functionality. Documentation Updates: Update relevant documentation to ensure users' understanding and usage of new features. Error Handling: Fix error display issues to ensure the accuracy of error messages. Logging: Fix page discovery run issues to ensure the accuracy of log recording. Preview Tags: Remove the 2026.5 preview tag from Nils site documentation to ensure the accuracy of the documentation. Query Support: Add support for numbers and booleans in AQL queries on JSON fields to ensure the accuracy of search functionality. Token Validation: Improve validation for Apple sources to ensure the security of OAuth authentication. Database Connection: Fix unavailable PostgreSQL connections to ensure the stability of database connections. Security Patches: Automate internal backups for multiple security patches to ensure system security. POC Code or Exploit Code No specific POC code or exploit code is included in this document.

Goal Reached Thanks to every supporter — we hit 100%!

goauthentik Release 2026.5.5 Security Update: OAuth id_token validation and password reset fixes

More from this source