See https://next.goauthentik.io/docs/releases/2026.5
What's Changed
- core: bump python-kadmin-rs from 0.7.1 to 0.7.2 (cherry-pick #22234 to version-2026.5) by @authentik-automation[bot] in #22238
- web/admin: User wizard label adjust and deactivate navigation when wizard is finished (cherry-pick #22133 to version-2026.5) by @authentik-automation[bot] in #22191
- web/admin: fix user wizard close button (cherry-pick #22222 to version-2026.5) by @authentik-automation[bot] in #22243
- root: refreshed icon (cherry-pick #22265 to version-2026.5) by @authentik-automation[bot] in #22266
- core: bump tokio from 1.52.1 to 1.52.2 (cherry-pick #22160 to version-2026.5) by @authentik-automation[bot] in #22267
- core: bump tokio from 1.52.2 to 1.52.3 (cherry-pick #22262 to version-2026.5) by @authentik-automation[bot] in #22268
- enterprise: fix account lockdown target handling (cherry-pick #22246 to version-2026.5) by @authentik-automation[bot] in #22252
- internal: Automated internal backport: CVE-2026-41577.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22294
- internal: Automated internal backport: CVE-2026-40172.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22292
- internal: Automated internal backport: CVE-2026-40165.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22290
- internal: Automated internal backport: GHSA-5wcc-hf24-rf5h.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22296
- internal: Automated internal backport: GHSA-973w-j457-rp2m.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22297
- internal: Automated internal backport: CVE-2026-42849.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22295
- internal: Automated internal backport: CVE-2026-41569.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22293
- internal: Automated internal backport: CVE-2026-40166.sec.patch to authentik-2026.5 by @authentik-automation[bot] in #22291
- website/docs: release notes for 2025.12.5 and 2026.2.3 (cherry-pick #22310 to version-2026.5) by @authentik-automation[bot] in #22313
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (cherry-pick #22322 to version-2026.5) by @authentik-automation[bot] in #22323
Full Changelog: version/2026.5.0-rc1...version/2026.5.0-rc2