Go/github.com/zitadel/zitadel CVE-2026-23511: medium 5.3, EPSS 0.40%

Zitadel has a user enumeration vulnerability in Login UIs in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4319
• nvd: CVE-2026-23511
• https://github.com/zitadel/zitadel/security/advisories/GHSA-pvm5-9frx-264r
• https://github.com/zitadel/zitadel/commit/0bb00dd9fc4e5e965f8e14fa2161a5076f3c308d
• https://github.com/zitadel/zitadel/commit/b85ab69e4679b0268e2b0e9b4cd04e934af10dd2
• https://github.com/zitadel/zitadel/commit/c300d4cc6a2775ab17ddfe76492f24170f8b858d
• https://github.com/zitadel/zitadel/releases/tag/v3.4.6
• https://github.com/zitadel/zitadel/releases/tag/v4.9.1

CVE-2026-23511 · published 2026-01-23T02:28:11Z · modified 2026-01-23T02:56:14.128312Z · JSON