{"action":"Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260717062356-56f4798ed31f or later.","affected":[{"fixed":"1.80.0-v2.20.0.20260717062356-56f4798ed31f","introduced":"0"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2026-85056"],"ecosystem":"Go","epss":0.00285,"exploited":false,"fixed_versions":["1.80.0-v2.20.0.20260717062356-56f4798ed31f"],"ghsa_id":"GHSA-9993-rfwp-rhwf","id":"tcs_01M5KGVN0JZX5ZC8Q60F149N4D","modified_at":"2026-10-01T20:45:15.930385576Z","published_at":"2026-10-01T20:23:38Z","references":["https://osv.dev/vulnerability/GO-2026-6589","https://github.com/zitadel/zitadel/security/advisories/GHSA-9993-rfwp-rhwf","https://github.com/zitadel/zitadel/commit/049dbb25a56587fb3980c85c99819cad69f637db","https://github.com/zitadel/zitadel/commit/56f4798ed31fc1cfcd9a0e7f6f0152289d2fdc43","https://github.com/zitadel/zitadel/releases/tag/v4.16.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6589","url":"https://osv.dev/vulnerability/GO-2026-6589"}],"summary":"ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadel"}