cvedb.io
CVE-2026-29192
HIGH · CVSS 7.7
EPSS exploitation probability: 0%
Published 2026-03-07T15:15:55.710 · Last modified 2026-06-17T10:29:45.207

Summary

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0.

Affected products

zitadel — zitadel

Does this affect you?

Add your gear to cvedb and we'll alert you only when zitadel ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.