CVE-2025-27507
3 advisories.
Go/github.com/zitadel/zitadel/v2 CVE-2025-27507: critical 9
IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations
Action: Upgrade github.com/zitadel/zitadel/v2 to 2.63.8 or later.
go get github.com/zitadel/zitadel/v2@v2.63.8go get github.com/zitadel/zitadel/v2@v2.64.5go get github.com/zitadel/zitadel/v2@v2.65.6go get github.com/zitadel/zitadel/v2@v2.66.11go get github.com/zitadel/zitadel/v2@v2.67.8go get github.com/zitadel/zitadel/v2@v2.68.4go get github.com/zitadel/zitadel/v2@v2.69.4go get github.com/zitadel/zitadel/v2@v2.70.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.63.8 | - |
| 2.64.0 | 2.64.5 | - |
| 2.65.0 | 2.65.6 | - |
| 2.66.0 | 2.66.11 | - |
| 2.67.0 | 2.67.8 | - |
| 2.68.0 | 2.68.4 | - |
| 2.69.0 | 2.69.4 | - |
| 2.70.0 | 2.70.1 | - |
Fixed versions
| 2.63.8 | 2.64.5 | 2.65.6 | 2.66.11 | 2.67.8 | 2.68.4 | 2.69.4 | 2.70.1 |
Sources
- osv: GHSA-f3gh-529w-v32x
- https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x
- https://nvd.nist.gov/vuln/detail/CVE-2025-27507
- https://github.com/zitadel/zitadel/commit/d9d8339813f1c43d3eb7d8d80f11fdabb2fd2ee4
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v2.63.8
- https://github.com/zitadel/zitadel/releases/tag/v2.64.5
- https://github.com/zitadel/zitadel/releases/tag/v2.65.6
- https://github.com/zitadel/zitadel/releases/tag/v2.66.11
- https://github.com/zitadel/zitadel/releases/tag/v2.67.8
- https://github.com/zitadel/zitadel/releases/tag/v2.68.4
- https://github.com/zitadel/zitadel/releases/tag/v2.69.4
- https://github.com/zitadel/zitadel/releases/tag/v2.70.1
- https://github.com/zitadel/zitadel/releases/tag/v2.71.0
- https://pkg.go.dev/vuln/GO-2025-3499
CVE-2025-27507 · published · modified · JSON
Go/github.com/zitadel/zitadel CVE-2025-27507: critical 9
IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations
Action: Upgrade github.com/zitadel/zitadel to 2.63.8 or later.
go get github.com/zitadel/zitadel@v2.63.8go get github.com/zitadel/zitadel@v2.64.5go get github.com/zitadel/zitadel@v2.65.6go get github.com/zitadel/zitadel@v2.66.11go get github.com/zitadel/zitadel@v2.67.8go get github.com/zitadel/zitadel@v2.68.4go get github.com/zitadel/zitadel@v2.69.4go get github.com/zitadel/zitadel@v2.70.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.63.8 | - |
| 2.64.0 | 2.64.5 | - |
| 2.65.0 | 2.65.6 | - |
| 2.66.0 | 2.66.11 | - |
| 2.67.0 | 2.67.8 | - |
| 2.68.0 | 2.68.4 | - |
| 2.69.0 | 2.69.4 | - |
| 2.70.0 | 2.70.1 | - |
Fixed versions
| 2.63.8 | 2.64.5 | 2.65.6 | 2.66.11 | 2.67.8 | 2.68.4 | 2.69.4 | 2.70.1 |
Sources
- osv: GHSA-f3gh-529w-v32x#Go/github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x
- https://nvd.nist.gov/vuln/detail/CVE-2025-27507
- https://github.com/zitadel/zitadel/commit/d9d8339813f1c43d3eb7d8d80f11fdabb2fd2ee4
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v2.63.8
- https://github.com/zitadel/zitadel/releases/tag/v2.64.5
- https://github.com/zitadel/zitadel/releases/tag/v2.65.6
- https://github.com/zitadel/zitadel/releases/tag/v2.66.11
- https://github.com/zitadel/zitadel/releases/tag/v2.67.8
- https://github.com/zitadel/zitadel/releases/tag/v2.68.4
- https://github.com/zitadel/zitadel/releases/tag/v2.69.4
- https://github.com/zitadel/zitadel/releases/tag/v2.70.1
- https://github.com/zitadel/zitadel/releases/tag/v2.71.0
- https://pkg.go.dev/vuln/GO-2025-3499
CVE-2025-27507 · published · modified · JSON
Go/github.com/zitadel/zitadel CVE-2025-27507: unknown
IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations in github.com/zitadel/zitadel
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3499
- https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x
- https://nvd.nist.gov/vuln/detail/CVE-2025-27507
- https://github.com/zitadel/zitadel/commit/d9d8339813f1c43d3eb7d8d80f11fdabb2fd2ee4
- https://github.com/zitadel/zitadel/releases/tag/v2.63.8
- https://github.com/zitadel/zitadel/releases/tag/v2.64.5
- https://github.com/zitadel/zitadel/releases/tag/v2.65.6
- https://github.com/zitadel/zitadel/releases/tag/v2.66.11
- https://github.com/zitadel/zitadel/releases/tag/v2.67.8
- https://github.com/zitadel/zitadel/releases/tag/v2.68.4
- https://github.com/zitadel/zitadel/releases/tag/v2.69.4
- https://github.com/zitadel/zitadel/releases/tag/v2.70.1
- https://github.com/zitadel/zitadel/releases/tag/v2.71.0
CVE-2025-27507 · published · modified · JSON