CVE-2026-29192
HIGHZITADEL 4.0.0-4.11.1 - Open Redirect
Title source: llmDescription
ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0.
Scores
CVSS v3
7.7
EPSS
0.0003
EPSS Percentile
8.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Classification
CWE
CWE-79
Status
draft
Affected Products (2)
zitadel/zitadel
< 4.12.0Go
zitadel/zitadel
< 4.12.0Go
Timeline
Published
Mar 07, 2026
Tracked Since
Mar 07, 2026