CVE-2026-29193
ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2
Summary
ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2
Original description
The description as published by the source.
ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov