CVE-2026-29193: Zitadel

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1.

Affected products

• Zitadel Zitadel: from 4.0.0, before 4.12.1 (fixed in 4.12.1)

Published 2026-03-07. Last modified 2026-06-17.