CVE-2026-44671

Go/github.com/zitadel/zitadel CVE-2026-44671: high 7.5

ZITADEL has LDAP Filter Injection in Login Flow

Action: Upgrade github.com/zitadel/zitadel to 3.4.10 or later.

go get github.com/zitadel/zitadel@v4.15.0

go get github.com/zitadel/zitadel@v3.4.10

Affected

Fixed versions

Sources

• osv: GHSA-rxvx-hhpj-q6px
• https://github.com/zitadel/zitadel/security/advisories/GHSA-rxvx-hhpj-q6px
• https://nvd.nist.gov/vuln/detail/CVE-2026-44671
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v3.4.10
• https://github.com/zitadel/zitadel/releases/tag/v4.15.0

CVE-2026-44671 · published 2026-05-08T17:11:29Z · modified 2026-06-25T23:11:09.181966797Z · JSON

Go/github.com/zitadel/zitadel CVE-2026-44671: unknown

ZITADEL has LDAP Filter Injection in Login Flow in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5648
• https://github.com/zitadel/zitadel/security/advisories/GHSA-rxvx-hhpj-q6px
• https://nvd.nist.gov/vuln/detail/CVE-2026-44671
• https://github.com/zitadel/zitadel/releases/tag/v3.4.10
• https://github.com/zitadel/zitadel/releases/tag/v4.15.0

CVE-2026-44671 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:37.458179714Z · JSON