Go/github.com/zitadel/zitadel CVE-2026-54693: high

ZITADEL Users Can Self-Verify Email/Phone via API

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260608144108-ed09b3df7f43

Affected

Fixed versions

Sources

• osv: GHSA-jq8w-8q2f-ffm9
• https://github.com/zitadel/zitadel/security/advisories/GHSA-jq8w-8q2f-ffm9
• https://github.com/zitadel/zitadel/commit/90f310212d3a5075084a603bf61fed549c92956d
• https://github.com/zitadel/zitadel/commit/a1748b2f0326ddf7be0de44b4f980ae2c07c0151
• https://github.com/zitadel/zitadel/commit/ed09b3df7f43e870423e4d8f2757e6894481604f
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v3.4.11
• https://github.com/zitadel/zitadel/releases/tag/v4.15.1

CVE-2026-54693 · published 2026-07-29T16:54:49Z · modified 2026-08-18T15:10:32.100282032Z · JSON