Security

A vulnerability in Authelia causes changes to user groups to not take effect immediately under specific configuration conditions, allowing users to access resources longer than expected after their permissions should have been revoked.

Authelia treats login attempts via username and email as separate events, allowing attackers twice as many password attempts before being blocked by rate limiting.

A vulnerability in Authelia allows JavaScript injection through manipulated cookies under very specific conditions, but only when the Content Security Policy is unsafely configured and additional vulnerable applications exist on the same domain.

A vulnerability in Authelia allows attackers to bypass brute-force protection mechanisms by using different case variations of the same username during Basic Auth authentication, creating separate ban buckets for each case variation.

A vulnerability in Authelia software can cause access control rules to be bypassed under very specific conditions when domains are not properly canonicalized.

A security vulnerability in authentik's OAuth2 implementation allows attackers to bypass PKCE security checks by simply omitting the code_verifier parameter, even when the OAuth2 flow was initiated with a code_challenge.

A security vulnerability in Authentik software allows attackers to steal session tokens when OAuth2 providers are configured with wildcards (*) as allowed redirect URLs.

A vulnerability in authentik's OAuth2 implementation allows attackers to bypass important PKCE security protections by removing certain parameters from authorization requests, enabling code injection attacks.

A vulnerability in Authentik software allowed any logged-in user to grant themselves administrator privileges by manipulating API tokens and changing their user assignment.

A security flaw in Authentik software bypasses access restrictions in OAuth2 Device Code Flow, allowing unauthorized users to obtain OAuth tokens and access protected applications.

A vulnerability in authentik software allows users to access certain API endpoints without proper authentication or authorization, potentially exposing sensitive certificate data.

A vulnerability in authentik allows applications and users to steal access tokens and use them to gain unauthorized access to other applications they shouldn't be able to access.

A critical vulnerability in Authentik software allows attackers to bypass password authentication by sending a manipulated X-Forwarded-For HTTP header. This enables them to log into known user accounts without providing a password.

A vulnerability in Authentik software allowed attackers with valid OAuth credentials to obtain tokens with unconfigured permissions, which could then be misused for malicious actions in trusting systems.

A vulnerability in authentik's OAuth2 component allows attackers to bypass redirect URL validation by registering domains with similar names, potentially leading to unauthorized redirects.

A vulnerability in authentik software allows attackers to guess the secret key used for authenticating an internal endpoint through repeated attempts. With this key, attackers can manipulate existing cookies or create new ones.

A vulnerability in Authentik software causes deleted user sessions to not be properly revoked when using database storage, allowing users to maintain access even after session deletion.

A vulnerability in authentik allows unauthorized users to access remote access connections by copying URLs with valid tokens, as session validation is missing.

A security vulnerability in authentik allows deactivated users with OAuth/SAML connections to partially access the system and authorize applications despite their accounts being disabled.

In the authentik authentication software, deactivated service accounts for OAuth providers can still be used for login even though they should be blocked.

A vulnerability in the authentik authentication software allows users to use expired invitations because they are not immediately recognized as invalid.

A vulnerability in authentik allows attackers to bypass authentication by using malformed cookies when authentik is configured as a Proxy Provider with Traefik or Caddy reverse proxies.

A vulnerability in authentik allows users with certain view permissions to execute arbitrary code on the server and thereby gain complete control over the application.

A vulnerability in authentik allows attackers to authenticate as any existing user by injecting malicious SAML assertions before valid signed assertions when certain security settings are not properly configured.

A vulnerability in authentik software allows users with limited management permissions to elevate themselves or other users to administrators with full system privileges by bypassing security controls.

A vulnerability in authentik allows attackers to poison OAuth2 providers by permanently storing malicious redirect URLs before authentication occurs. This leads to authorization code interception and potential account takeover for all subsequent OAuth2 login flows using the affected provider.

A security flaw in authentik's SAML processing ignores time limits and audience restrictions in authentication tokens, allowing attackers to reuse expired tokens or tokens intended for other services.

A vulnerability in authentik allows authenticated non-admin users to retrieve secret OAuth2 client credentials from providers they previously authenticated against, potentially enabling unauthorized reuse of these confidential authentication credentials.

A vulnerability in authentik allows attackers to bypass nginx authentication by setting a specific HTTP header, enabling unauthorized access to protected applications without any login credentials.

A vulnerability in Authentik software allows attackers to gain access to other user accounts by manipulating SAML assertions through injecting XML comments into NameID values.

A vulnerability in authentik's WS-Federation provider allows attackers to redirect users to malicious websites where they can intercept valid login credentials that can be misused for identity impersonation.

A critical vulnerability in authentik's Simple Flow Executor allows cross-site scripting attacks, enabling attackers to hijack user sessions or redirect users to malicious sites.

A security flaw in authentik's SAML authentication allows attackers to impersonate other users by manipulating valid digital signatures and injecting forged identity data.

A vulnerability in authentik allows attackers with low privileges to log in as any user by manipulating connections between user accounts and external sources.

A critical security vulnerability in Authentik software allows attackers to bypass authentication stages by sending an empty POST request, enabling them to log in without providing valid credentials.

A vulnerability in the Mailcow email software allows attackers to inject malicious code into the database that gets executed later during quarantine notifications, potentially exposing sensitive data like administrator credentials.

A vulnerability in Neko software (virtual browser running in Docker) allows any authenticated user to immediately gain full administrative control over the entire instance, resulting in complete compromise of the system.

A security vulnerability in OpenClaw allows attackers to bypass security controls by overriding environment variables, thereby circumventing proxy settings, TLS verification, and Docker restrictions.

A critical security vulnerability in Flowsint, an OSINT analysis tool, allows attackers to execute arbitrary system commands as administrator by injecting special characters into organization nodes and escaping from Docker containers.

A vulnerability in Arcane, a Docker management interface, allows attackers to make the server send HTTP requests to arbitrary URLs and receive the responses without requiring authentication.

A vulnerability in the Docker management application Dockyard allows attackers to start or stop containers through malicious links when clicked by an administrator.

A vulnerability in Sonicverse Radio software allows authenticated users to make arbitrary HTTP requests from the server to internal or external systems, potentially exposing sensitive data or attacking internal services.

A vulnerability in suvarchal docker-mcp-server allows attackers to inject and execute malicious operating system commands through the HTTP interface. This can lead to complete system compromise.

A vulnerability in the BentoML Python library allows attackers to execute malicious code on the host system when users import a manipulated bento archive and containerize it.

A vulnerability in Aperi'Solve allows attackers to execute arbitrary code and gain full server control through unsanitized password inputs when uploading JPEG files.

A vulnerability in the Kestra orchestration platform allows authenticated users to execute arbitrary commands on the server by visiting a crafted link.

Docker Model Runner has a vulnerability that allows attackers to target internal network services and steal their data by using malicious container registries.

A vulnerability in the Claude SDK for Python stored files with insecure permissions, allowing local attackers on shared systems to read sensitive data or manipulate AI model behavior in Docker environments.

A security vulnerability in Admidio (not Docker Engine) allows attackers to access uploaded documents without authentication via HTTP, because the Apache configuration in the Docker image ignores access restrictions.

A security vulnerability in the act software (not Docker Engine) allows network attackers to create malicious cache files and retrieve existing caches, potentially leading to malicious code execution within Docker containers.