CVE-2026-76081

Go/github.com/zitadel/zitadel CVE-2026-76081: medium 5.5, EPSS 0.40%

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

Action: Upgrade github.com/zitadel/zitadel to 4.16.0 or later.

go get github.com/zitadel/zitadel@v4.16.0

Affected

Fixed versions

Sources

• osv: GHSA-v859-c572-qh5p
• https://github.com/zitadel/zitadel/security/advisories/GHSA-v859-c572-qh5p
• https://github.com/zitadel/zitadel/commit/9d60e83d6faa5e7e7a5339e031cdb26e0efe4d59
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.16.0

CVE-2026-76081 · published 2026-09-14T21:31:37Z · modified 2026-09-17T17:41:02.397511368Z · JSON

Go/github.com/zitadel/zitadel CVE-2026-76081: unknown, EPSS 0.40%

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions in github.com/zitadel/zitadel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6473
• https://github.com/zitadel/zitadel/security/advisories/GHSA-v859-c572-qh5p
• https://github.com/zitadel/zitadel/commit/9d60e83d6faa5e7e7a5339e031cdb26e0efe4d59
• https://github.com/zitadel/zitadel/releases/tag/v4.16.0

CVE-2026-76081 · published 2026-09-16T16:56:22Z · modified 2026-09-17T17:30:12.905223394Z · JSON