{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"},{"introduced":"0"},{"introduced":"0"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2026-44671"],"ecosystem":"Go","epss":0.00479,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rxvx-hhpj-q6px","id":"tcs_01M5KGNWAYVSRMDDZ0YKY1FPAB","modified_at":"2026-06-25T23:01:37.458179714Z","published_at":"2026-06-25T22:34:38Z","references":["https://osv.dev/vulnerability/GO-2026-5648","https://github.com/zitadel/zitadel/security/advisories/GHSA-rxvx-hhpj-q6px","https://nvd.nist.gov/vuln/detail/CVE-2026-44671","https://github.com/zitadel/zitadel/releases/tag/v3.4.10","https://github.com/zitadel/zitadel/releases/tag/v4.15.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5648","url":"https://osv.dev/vulnerability/GO-2026-5648"}],"summary":"ZITADEL has LDAP Filter Injection in Login Flow in github.com/zitadel/zitadel"}