CVE-2025-64102

Go/github.com/zitadel/zitadel/v2 CVE-2025-64102: high

Zitadel allows brute-forcing authentication factors

Action: Upgrade github.com/zitadel/zitadel/v2 to 2.71.18 or later.

go get github.com/zitadel/zitadel/v2@v2.71.18

Affected

Fixed versions

Sources

• osv: GHSA-xrw9-r35x-x878
• https://github.com/zitadel/zitadel/security/advisories/GHSA-xrw9-r35x-x878
• https://nvd.nist.gov/vuln/detail/CVE-2025-64102
• https://github.com/zitadel/zitadel/commit/b8db8cdf9cc8ea13f461758aef12457f8b7d972a
• https://github.com/zitadel/zitadel
• https://pkg.go.dev/vuln/GO-2025-4085

CVE-2025-64102 · published 2025-10-29T22:21:05Z · modified 2025-11-05T22:13:38Z · JSON

Go/github.com/zitadel/zitadel CVE-2025-64102: high

Zitadel allows brute-forcing authentication factors

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20251029090735-b8db8cdf9cc8 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20251029090735-b8db8cdf9cc8

Affected

Fixed versions

Sources

• osv: GHSA-xrw9-r35x-x878#Go/github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/security/advisories/GHSA-xrw9-r35x-x878
• https://nvd.nist.gov/vuln/detail/CVE-2025-64102
• https://github.com/zitadel/zitadel/commit/b8db8cdf9cc8ea13f461758aef12457f8b7d972a
• https://github.com/zitadel/zitadel
• https://pkg.go.dev/vuln/GO-2025-4085

CVE-2025-64102 · published 2025-10-29T22:21:05Z · modified 2025-11-05T22:13:38Z · JSON

Go/github.com/zitadel/zitadel CVE-2025-64102: unknown

Zitadel allows brute-forcing authentication factors in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4085
• https://github.com/zitadel/zitadel/security/advisories/GHSA-xrw9-r35x-x878
• https://nvd.nist.gov/vuln/detail/CVE-2025-64102
• https://github.com/zitadel/zitadel/commit/b8db8cdf9cc8ea13f461758aef12457f8b7d972a

CVE-2025-64102 · published 2025-11-05T18:41:15Z · modified 2025-11-05T19:57:10.521311Z · JSON