Threats tagged 'bit-authentik-2026-61574'

authentik versions prior to 2026.2.6 and between 2026.5.0 and before 2026.5.5 contain an authorization bypass vulnerability in the Remote Access Control endpoint listing. Authenticated users can retrieve all configured endpoints and their connection settings, including stored credentials, regardless of their access rights. This flaw allows unauthorized access to managed RDP, SSH, and VNC targets, exposing sensitive credentials and enabling interactive access to systems outside the user's authorization scope. Deployments not using the enterprise Remote Access Control provider are not affected. The issue is fixed in versions 2026.2.6 and 2026.5.5.