Is authentik 2023.10.7 patched?
Current stable (2026.5.3): 100/100
2023.10.7 has 17 open critical-or-high vulnerabilities. Run 2025.12.6 or later to clear them. See what 2025.12.6 fixes →
Summary iPlain-English security status for authentik 2023.10.7, built from its CVEs, active-exploitation data, end-of-life date and latest release.
authentik 2023.10.7 is part of the 2023.10 release line. 21 known vulnerabilities affect it. The minimum safe version is 2025.12.6 — upgrade to it or later to clear the open critical/high issues. The 2023.10 line reached end-of-life on 2024-04-24, so it no longer receives security patches. The latest supported authentik release is 2026.5.3.
Known issues affecting 2023.10.7
Exploited first, then by exploitation probability.
CVE-2024-52289 CRITICAL EPSS 1% → fixed in 2024.10.3 CVE-2024-37905 HIGH EPSS 1% → fixed in 2024.4.3 CVE-2026-25227 CRITICAL EPSS 1% → fixed in 2025.12.4 CVE-2024-38371 HIGH EPSS 1% → fixed in 2024.4.3 CVE-2024-52287 HIGH EPSS 1% → fixed in 2024.10.3 CVE-2024-42490 HIGH EPSS 1% → fixed in 2024.6.4 CVE-2024-47070 CRITICAL EPSS 1% → fixed in 2024.8.3 CVE-2024-52307 MEDIUM EPSS 1% → fixed in 2024.10.3 CVE-2026-25748 HIGH EPSS 0% → fixed in 2025.12.4 CVE-2025-53942 HIGH EPSS 0% → fixed in 2025.6.4 CVE-2025-52553 CRITICAL EPSS 0% → fixed in 2025.6.3 CVE-2024-47077 MEDIUM EPSS 0% → fixed in 2024.8.3 CVE-2025-29928 HIGH EPSS 0% → fixed in 2025.2.3 CVE-2026-42849 CRITICAL EPSS 0% → fixed in 2026.2.3 CVE-2026-49448 CRITICAL EPSS 0% → fixed in 2026.5.1 CVE-2024-11623 MEDIUM EPSS 0% → fixed in 2024.10.4 CVE-2026-47201 HIGH EPSS 0% → fixed in 2026.5.1 CVE-2026-49443 HIGH EPSS 0% → fixed in 2026.5.1 CVE-2026-41569 MEDIUM EPSS 0% → fixed in 2026.2.3 CVE-2026-41577 HIGH EPSS 0% → fixed in 2026.2.3Other authentik versions
Check another release line of authentik.
Frequently asked
Is authentik 2023.10.7 patched?
authentik 2023.10.7 is end-of-life and no longer receives security patches. Move to 2026.5.3.
What version should I upgrade authentik 2023.10.7 to?
Upgrade authentik 2023.10.7 to at least 2025.12.6 to clear its 17 open critical-or-high vulnerabilities.
When does authentik 2023.10 reach end-of-life?
authentik 2023.10 reached end-of-life on 2024-04-24 and no longer receives security patches.
What is the latest version of authentik?
The latest supported authentik release is 2026.5.3.
Is authentik 2023.10.7 still receiving security updates?
No — authentik 2023.10.7 is on the 2023.10 line, which reached end-of-life on 2024-04-24 and no longer receives security updates. Upgrade to 2026.5.3 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against authentik's official advisory before you patch or upgrade — authentik official site ↗