CVE-2026-85056
2 advisories.
Go/github.com/zitadel/zitadel CVE-2026-85056: high 8.2, EPSS 0.29%
ZITADEL: MFA bypass via session reuse in Login V2
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260717062356-56f4798ed31f or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260717062356-56f4798ed31fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.80.0-v2.20.0.20260717062356-56f4798ed31f | - |
Fixed versions
| 1.80.0-v2.20.0.20260717062356-56f4798ed31f |
Sources
- osv: GHSA-9993-rfwp-rhwf
- https://github.com/zitadel/zitadel/security/advisories/GHSA-9993-rfwp-rhwf
- https://github.com/zitadel/zitadel/commit/049dbb25a56587fb3980c85c99819cad69f637db
- https://github.com/zitadel/zitadel/commit/56f4798ed31fc1cfcd9a0e7f6f0152289d2fdc43
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v4.16.1
CVE-2026-85056 · published · modified · JSON
Go/github.com/zitadel/zitadel CVE-2026-85056: unknown, EPSS 0.29%
ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadel
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260717062356-56f4798ed31f or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260717062356-56f4798ed31fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.80.0-v2.20.0.20260717062356-56f4798ed31f | - |
Fixed versions
| 1.80.0-v2.20.0.20260717062356-56f4798ed31f |
Sources
- osv: GO-2026-6589
- https://github.com/zitadel/zitadel/security/advisories/GHSA-9993-rfwp-rhwf
- https://github.com/zitadel/zitadel/commit/049dbb25a56587fb3980c85c99819cad69f637db
- https://github.com/zitadel/zitadel/commit/56f4798ed31fc1cfcd9a0e7f6f0152289d2fdc43
- https://github.com/zitadel/zitadel/releases/tag/v4.16.1
CVE-2026-85056 · published · modified · JSON