CVE-2026-55106 | goauthentik up to 2026.2.5/2026.5.4 LDAP Source API improper authorization

August 18, 2026 Yanac

A vulnerability was found in goauthentik authentik up to 2026.2.5/2026.5.4. It has been declared as problematic. Affected is an unknown function of the component LDAP Source API. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2026-55106. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More