Is authentik 2025.4.4 patched?
Current stable (2026.5.3): 100/100
2025.4.4 has 8 open critical-or-high vulnerabilities. Run 2025.12.6 or later to clear them. See what 2025.12.6 fixes →
Summary iPlain-English security status for authentik 2025.4.4, built from its CVEs, active-exploitation data, end-of-life date and latest release.
authentik 2025.4.4 is part of the 2025.4 release line. 9 known vulnerabilities affect it. The minimum safe version is 2025.12.6 — upgrade to it or later to clear the open critical/high issues. The 2025.4 line reached end-of-life on 2025-08-20, so it no longer receives security patches. The latest supported authentik release is 2026.5.3.
Known issues affecting 2025.4.4
Exploited first, then by exploitation probability.
CVE-2026-25227 CRITICAL EPSS 1% → fixed in 2025.12.4 CVE-2026-25748 HIGH EPSS 0% → fixed in 2025.12.4 CVE-2026-42849 CRITICAL EPSS 0% → fixed in 2026.2.3 CVE-2026-49448 CRITICAL EPSS 0% → fixed in 2026.5.1 CVE-2026-47201 HIGH EPSS 0% → fixed in 2026.5.1 CVE-2026-49443 HIGH EPSS 0% → fixed in 2026.5.1 CVE-2026-41569 MEDIUM EPSS 0% → fixed in 2026.2.3 CVE-2026-41577 HIGH EPSS 0% → fixed in 2026.2.3 CVE-2026-25922 HIGH EPSS 0% → fixed in 2025.12.4Other authentik versions
Check another release line of authentik.
Frequently asked
Is authentik 2025.4.4 patched?
authentik 2025.4.4 is end-of-life and no longer receives security patches. Move to 2026.5.3.
What version should I upgrade authentik 2025.4.4 to?
Upgrade authentik 2025.4.4 to at least 2025.12.6 to clear its 8 open critical-or-high vulnerabilities.
When does authentik 2025.4 reach end-of-life?
authentik 2025.4 reached end-of-life on 2025-08-20 and no longer receives security patches.
What is the latest version of authentik?
The latest supported authentik release is 2026.5.3.
Is authentik 2025.4.4 still receiving security updates?
No — authentik 2025.4.4 is on the 2025.4 line, which reached end-of-life on 2025-08-20 and no longer receives security updates. Upgrade to 2026.5.3 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against authentik's official advisory before you patch or upgrade — authentik official site ↗