CVE-2026-23511

Go/github.com/zitadel/zitadel CVE-2026-23511: medium 5.3, EPSS 0.40%

Zitadel has a user enumeration vulnerability in Login UIs

Action: Upgrade github.com/zitadel/zitadel to 3.4.6 or later.

go get github.com/zitadel/zitadel@v4.9.1

go get github.com/zitadel/zitadel@v3.4.6

Affected

Fixed versions

Sources

• osv: GHSA-pvm5-9frx-264r
• https://github.com/zitadel/zitadel/security/advisories/GHSA-pvm5-9frx-264r
• https://nvd.nist.gov/vuln/detail/CVE-2026-23511
• https://github.com/zitadel/zitadel/commit/0bb00dd9fc4e5e965f8e14fa2161a5076f3c308d
• https://github.com/zitadel/zitadel/commit/b85ab69e4679b0268e2b0e9b4cd04e934af10dd2
• https://github.com/zitadel/zitadel/commit/c300d4cc6a2775ab17ddfe76492f24170f8b858d
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v3.4.6
• https://github.com/zitadel/zitadel/releases/tag/v4.9.1

CVE-2026-23511 · published 2026-01-15T18:17:06Z · modified 2026-02-03T03:11:30.555128Z · JSON

Go/github.com/zitadel/zitadel CVE-2026-23511: unknown, EPSS 0.40%

Zitadel has a user enumeration vulnerability in Login UIs in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4319
• https://github.com/zitadel/zitadel/security/advisories/GHSA-pvm5-9frx-264r
• https://nvd.nist.gov/vuln/detail/CVE-2026-23511
• https://github.com/zitadel/zitadel/commit/0bb00dd9fc4e5e965f8e14fa2161a5076f3c308d
• https://github.com/zitadel/zitadel/commit/b85ab69e4679b0268e2b0e9b4cd04e934af10dd2
• https://github.com/zitadel/zitadel/commit/c300d4cc6a2775ab17ddfe76492f24170f8b858d
• https://github.com/zitadel/zitadel/releases/tag/v3.4.6
• https://github.com/zitadel/zitadel/releases/tag/v4.9.1

CVE-2026-23511 · published 2026-01-23T02:28:11Z · modified 2026-01-23T02:56:14.128312Z · JSON