CVE-2025-64103

Go/github.com/zitadel/zitadel/v2 CVE-2025-64103: high

Zitadel May Bypass Second Authentication Factor

Action: Upgrade github.com/zitadel/zitadel/v2 to 2.71.18 or later.

go get github.com/zitadel/zitadel/v2@v2.71.18

Affected

Fixed versions

Sources

• osv: GHSA-cfjq-28r2-4jv5
• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://nvd.nist.gov/vuln/detail/CVE-2025-64103
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b
• https://github.com/zitadel/zitadel
• https://pkg.go.dev/vuln/GO-2025-4083

CVE-2025-64103 · published 2025-10-29T22:21:27Z · modified 2025-11-05T22:14:13Z · JSON

Go/github.com/zitadel/zitadel CVE-2025-64103: high

Zitadel May Bypass Second Authentication Factor

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20251029091250-b284f8474eed or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20251029091250-b284f8474eed

Affected

Fixed versions

Sources

• osv: GHSA-cfjq-28r2-4jv5#Go/github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://nvd.nist.gov/vuln/detail/CVE-2025-64103
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b
• https://github.com/zitadel/zitadel
• https://pkg.go.dev/vuln/GO-2025-4083

CVE-2025-64103 · published 2025-10-29T22:21:27Z · modified 2025-11-05T22:14:13Z · JSON

Go/github.com/zitadel/zitadel CVE-2025-64103: unknown

Zitadel May Bypass Second Authentication Factor in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4083
• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://nvd.nist.gov/vuln/detail/CVE-2025-64103
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b

CVE-2025-64103 · published 2025-11-05T18:41:15Z · modified 2025-11-05T19:57:12.401521Z · JSON