View Ridge Security
Back to Cyber Hose

Critical ZITADEL identity management flaws enable account takeover

Eight critical ZITADEL vulnerabilities allow account takeover, authentication bypass, and session hijacking.

🔓 CVEs & KEV

  • The latest CVE roundup highlights multiple critical vulnerabilities in ZITADEL identity management software.

  • • CVE-2026-105215 — CVSS 9.3 — Account Pre-Hijacking via Forged External IdP Callback in ZITADEL before 4.16.2

  • • CVE-2026-105209 — CVSS 9.3 — Cross-Organization Account Takeover via Passkey Enrollment in ZITADEL before 3.4.15 and 4.17.1

  • • CVE-2026-105207 — CVSS 9.3 — Account Takeover via External IdP Linking in ZITADEL before 4.17.3

  • • CVE-2026-105211 — CVSS 9.2 — Authentication Bypass via Login V2 OTP returnCode in ZITADEL before 4.17.1

  • • CVE-2026-105213 — CVSS 8.8 — Authentication Bypass via Login V2 for Deactivated Organizations in ZITADEL before 4.17.1

  • • CVE-2026-105210 — CVSS 8.8 — Unauthenticated MFA Enrollment via Login V1 Init Handle in ZITADEL before 4.17.1

  • • CVE-2026-105212 — CVSS 8.7 — Account Takeover via Passkey Enrollment in ZITADEL before 3.4.14 and 4.16.2

  • • CVE-2026-105208 — CVSS 8.7 — Session Hijacking via Forgeable IdP Intent Tokens in ZITADEL before 4.17.3

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check