diff --git a/authentik/__init__.py b/authentik/__init__.py
index 507d41ea2c..9b0579433c 100644
--- a/authentik/__init__.py
+++ b/authentik/__init__.py
@@ -3,7 +3,7 @@
 from functools import lru_cache
 from os import environ
 
-VERSION = "2025.10.2"
+VERSION = "2025.10.3"
 ENV_GIT_HASH_KEY = "GIT_BUILD_HASH"
 
 
diff --git a/blueprints/schema.json b/blueprints/schema.json
index e347b36c30..db20efd6c0 100644
--- a/blueprints/schema.json
+++ b/blueprints/schema.json
@@ -2,7 +2,7 @@
     "$schema": "http://json-schema.org/draft-07/schema",
     "$id": "https://goauthentik.io/blueprints/schema.json",
     "type": "object",
-    "title": "authentik 2025.10.2 Blueprint schema",
+    "title": "authentik 2025.10.3 Blueprint schema",
     "required": [
         "version",
         "entries"
diff --git a/docker-compose.yml b/docker-compose.yml
index 41e9faf54b..e8e44fab7a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
       AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
       AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.3}
     ports:
     - ${COMPOSE_PORT_HTTP:-9000}:9000
     - ${COMPOSE_PORT_HTTPS:-9443}:9443
@@ -52,7 +52,7 @@ services:
       AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
       AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
       AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.10.3}
     restart: unless-stopped
     user: root
     volumes:
diff --git a/internal/constants/VERSION b/internal/constants/VERSION
index 4b8b63c2e3..8627012e50 100644
--- a/internal/constants/VERSION
+++ b/internal/constants/VERSION
@@ -1 +1 @@
-2025.10.2
\ No newline at end of file
+2025.10.3
\ No newline at end of file
diff --git a/lifecycle/aws/template.yaml b/lifecycle/aws/template.yaml
index a9c7d9c244..49bc8c9641 100644
--- a/lifecycle/aws/template.yaml
+++ b/lifecycle/aws/template.yaml
@@ -18,7 +18,7 @@ Parameters:
     Description: authentik Docker image
   AuthentikVersion:
     Type: String
-    Default: 2025.10.2
+    Default: 2025.10.3
     Description: authentik Docker image tag
   AuthentikServerCPU:
     Type: Number
diff --git a/package-lock.json b/package-lock.json
index 02633ec5a9..603b1134ba 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@goauthentik/authentik",
-    "version": "2025.10.2",
+    "version": "2025.10.3",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@goauthentik/authentik",
-            "version": "2025.10.2",
+            "version": "2025.10.3",
             "dependencies": {
                 "@eslint/js": "^9.31.0",
                 "@typescript-eslint/eslint-plugin": "^8.38.0",
diff --git a/package.json b/package.json
index 0229a9a231..e38d321f13 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@goauthentik/authentik",
-    "version": "2025.10.2",
+    "version": "2025.10.3",
     "private": true,
     "type": "module",
     "dependencies": {
diff --git a/pyproject.toml b/pyproject.toml
index 1a988b37f1..ce30e34053 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "authentik"
-version = "2025.10.2"
+version = "2025.10.3"
 description = ""
 authors = [{ name = "authentik Team", email = "hello@goauthentik.io" }]
 requires-python = "==3.13.*"
diff --git a/schema.yml b/schema.yml
index 2cd9087e0e..de4a677a75 100644
--- a/schema.yml
+++ b/schema.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: authentik
-  version: 2025.10.2
+  version: 2025.10.3
   description: Making authentication simple.
   contact:
     email: hello@goauthentik.io
diff --git a/uv.lock b/uv.lock
index 7aa28cfcf1..aa9927aedc 100644
--- a/uv.lock
+++ b/uv.lock
@@ -170,7 +170,7 @@ wheels = [
 
 [[package]]
 name = "authentik"
-version = "2025.10.2"
+version = "2025.10.3"
 source = { editable = "." }
 dependencies = [
     { name = "argon2-cffi" },
diff --git a/web/package-lock.json b/web/package-lock.json
index 5a112261b1..c26af8e4f9 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@goauthentik/web",
-    "version": "2025.10.2",
+    "version": "2025.10.3",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@goauthentik/web",
-            "version": "2025.10.2",
+            "version": "2025.10.3",
             "license": "MIT",
             "workspaces": [
                 "./packages/*"
diff --git a/web/package.json b/web/package.json
index d648afe581..180d463d8c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@goauthentik/web",
-    "version": "2025.10.2",
+    "version": "2025.10.3",
     "license": "MIT",
     "private": true,
     "scripts": {