CVE-2026-29193

Go/github.com/zitadel/zitadel/v2 CVE-2026-29193: high 8.2, EPSS 0.35%

ZITADEL: Login V2 UI Policy Bypass Allows Unauthorized Self-Registration and Authentication

Action: Upgrade github.com/zitadel/zitadel/v2 to 4.12.1 or later.

go get github.com/zitadel/zitadel/v2@v4.12.1

Affected

Fixed versions

Sources

• osv: GHSA-25rw-g6ff-fmg8
• https://github.com/zitadel/zitadel/security/advisories/GHSA-25rw-g6ff-fmg8
• https://nvd.nist.gov/vuln/detail/CVE-2026-29193
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.12.1

CVE-2026-29193 · published 2026-03-04T22:51:16Z · modified 2026-03-23T04:56:19.304930173Z · JSON

Go/github.com/zitadel/zitadel CVE-2026-29193: high 8.2, EPSS 0.35%

ZITADEL: Login V2 UI Policy Bypass Allows Unauthorized Self-Registration and Authentication

Action: Upgrade github.com/zitadel/zitadel to 4.12.1 or later.

go get github.com/zitadel/zitadel@v4.12.1

Affected

Fixed versions

Sources

• osv: GHSA-25rw-g6ff-fmg8#Go/github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/security/advisories/GHSA-25rw-g6ff-fmg8
• https://nvd.nist.gov/vuln/detail/CVE-2026-29193
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.12.1

CVE-2026-29193 · published 2026-03-04T22:51:16Z · modified 2026-03-23T04:56:19.304930173Z · JSON

Go/github.com/zitadel/zitadel CVE-2026-29193: unknown, EPSS 0.35%

ZITADEL: Login V2 UI Policy Bypass Allows Unauthorized Self-Registration and Authentication in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4604
• https://github.com/zitadel/zitadel/security/advisories/GHSA-25rw-g6ff-fmg8
• https://github.com/zitadel/zitadel/releases/tag/v4.12.1

CVE-2026-29193 · published 2026-03-10T18:28:10Z · modified 2026-03-23T04:53:14.095938Z · JSON