Go/github.com/zitadel/zitadel CVE-2026-55670: low, EPSS 0.36%

ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260615092437-6082e59d47c1 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260615092437-6082e59d47c1

Affected

Fixed versions

Sources

• osv: GHSA-6x8v-2fq5-2229
• https://github.com/zitadel/zitadel/security/advisories/GHSA-6x8v-2fq5-2229
• https://github.com/zitadel/zitadel/commit/6082e59d47c17a9d54a6b0556b3f31559d7c620a
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.15.2

CVE-2026-55670 · published 2026-06-18T13:07:34Z · modified 2026-06-25T19:56:24.806726111Z · JSON