CVE-2024-37905

authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4	Release Notes
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3	Release Notes
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0	Release Notes
https://github.com/goauthentik/authentik/security/advisories/GHSA-c78c-2r9w-p7x4	Vendor Advisory
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4	Release Notes
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3	Release Notes
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0	Release Notes
https://github.com/goauthentik/authentik/security/advisories/GHSA-c78c-2r9w-p7x4	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:goauthentik:authentik::::::::
	cpe:2.3:a:goauthentik:authentik::::::::

History

No history.

Information

Published : 2024-06-28 18:15

Updated : 2025-08-21 16:14

NVD link : CVE-2024-37905

Mitre link : CVE-2024-37905

CVE.ORG link : CVE-2024-37905

JSON object : View

Products Affected

goauthentik

authentik

CWE

CWE-284

Improper Access Control

CWE-863

Incorrect Authorization

{"id": "CVE-2024-37905", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-06-28T18:15:04.400", "references": [{"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-c78c-2r9w-p7x4", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-c78c-2r9w-p7x4", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.\n"}, {"lang": "es", "value": "authentik es un proveedor de identidades de c\u00f3digo abierto que enfatiza la flexibilidad y la versatilidad. El mecanismo Authentik API-Access-Token se puede explotar para obtener privilegios de usuario administrador. Una explotaci\u00f3n exitosa del problema dar\u00e1 como resultado que un usuario obtenga acceso de administrador completo a la aplicaci\u00f3n Authentik, incluido el restablecimiento de contrase\u00f1as de usuario y m\u00e1s. Este problema se solucion\u00f3 en las versiones 2024.2.4, 2024.4.2 y 2024.6.0."}], "lastModified": "2025-08-21T16:14:04.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED1F1937-A547-440E-8D37-5830973FDB91", "versionEndExcluding": "2024.2.4"}, {"criteria": "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB436255-F93A-4090-96AE-3AF72C6F68E2", "versionEndExcluding": "2024.4.3", "versionStartIncluding": "2024.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}