A security vulnerability in authentik, an open-source identity provider, allows bypassing the Source stage by sending an empty POST request. The vulnerability affects versions prior to 2025.12.6, 2026.2.4, and 2026.5.1. This represents an authentication bypass vulnerability that could allow unauthorized access to protected resources. The issue has been patched in the specified versions and users should update immediately.