CVE-2026-29193
ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2
Résumé
ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov