CVE-2026-61574

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5

Description The Remote Access Control endpoint list returns all configured endpoints to any authenticated user, ignoring application-specific access controls. The response includes connection settings that may contain stored credentials. Additionally, the connection flow fails to verify if an endpoint belongs to the Remote Access Control application used to launch it. This allows authenticated users to view hosts and credentials for managed RDP, SSH, and VNC targets and gain interactive access to unauthorized systems. This issue only affects deployments using the enterprise Remote Access Control provider.

Recommendations Update to version 2026.2.6. Update to version 2026.5.5.