Last Modified: Feb 03, 2026
Affected Product(s):
F5OS F5OS, F5OS-A, F5OS-C
Known Affected Versions:
F5OS-A 1.8.1, F5OS-A 1.8.2, F5OS-A 1.8.3, F5OS-C 1.8.1, F5OS-C 1.8.2
Opened: Jun 24, 2024 Severity: 3-Major
F5OS API (restconf) tokens expire after approximately a minute of inactivity, regardless of the configured token lifetime. In the audit log, the token is rejected with an error of: ERROR: Token is not active: <username><session ID>
API tokens are invalidated prematurely and cannot be renewed, and the user must request new tokens.
- Using the F5OS API - Wait more than a minute between API requests
None
None