Known Vulnerabilities for products from Zitadel
Listed below are 13 of the newest known vulnerabilities associated with the vendor "Zitadel".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109374 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109373 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109372 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109371 json | Not Provided | 2026-10-12 | 2026-10-15 | |
| CVE-2026-105215 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-105214 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-105213 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-105212 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-105211 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-105210 json | Not Provided | 2026-10-04 | 2026-10-05 | |
| CVE-2026-44671 json | ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discove... | Not Provided | 2026-05-14 | 2026-05-15 |
| CVE-2025-67717 json | ZITADEL is an open-source identity infrastructure tool. Versions 2.44.0 through 3.4.4 and 4.0.0-rc.1 through 4.7.1 disclose t... | Not Provided | 2025-12-11 | 2026-10-14 |
| CVE-2025-67495 json | ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS thr... | Not Provided | 2025-12-09 | 2026-10-14 |
| CVE-2025-67494 json | ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-r... | Not Provided | 2025-12-09 | 2026-10-14 |
| CVE-2025-64717 json | ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and ... | Not Provided | 2025-11-13 | 2026-10-19 |
| CVE-2025-64103 json | Starting from 2.53.6, 2.54.3, and 2.55.0, Zitadel only required multi factor authentication in case the login policy has eith... | Not Provided | 2025-10-29 | 2026-10-19 |
| CVE-2025-64102 json | Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, an attacker can perform an onlin... | Not Provided | 2025-10-29 | 2026-10-19 |
| CVE-2025-64101 json | Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, a potential vulnerability exists... | Not Provided | 2025-10-29 | 2026-10-19 |
| CVE-2023-47111 json | ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a `Lockout Policy` with a... | 3.7 - LOW | 2023-11-08 | 2023-11-16 |
| CVE-2023-46238 json | ZITADEL is an identity infrastructure management system. ZITADEL users can upload their own avatar image using various image ... | 5.4 - MEDIUM | 2023-10-26 | 2023-11-07 |