Skip to content
OpenAdvisories

Vendor

zitadel

78 known vulnerabilities.

Products

zitadel 78
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-109372 Public exploit

    ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion

    ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using the provider named in the request URL but resolves the user from the login intent wi…

    zitadel zitadel