CVE-2026-29193Disclosure(zitadel / zitadel)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1.

zitadel CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/zitadel/zitadel/security/advisories/GHSA-25rw-g6ff-fmg8

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

zitadel

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-03-07); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

zitadel

Products

zitadel

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-07	3	Disclosure2General1
2026-03-12	1	General1

Full discourse4 posts

CRAC Learning - Tech@cracbot210d
General
CVE-2026-29193 (CVSS:8.2, HIGH) is Analyzed. ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login..https://nvd.nist.gov/vuln/detail/CVE-2026-29193 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE‑2026‑29193 has been identified with a CVSS score of 8.2 (HIGH) impacting Zitadel versions 4.0.0‑4.12.0, but no PoC, exploit, or patch details are provided.
0000016
172 followersView on X
CVE@CVEnew215d
Disclosure
CVE-2026-29193 ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior … https://www.cve.org/CVERecord?id=CVE-2026-29193
Post summary
CVE-2026-29193 exposes an authentication bypass in Zitadel’s login V2 UI for versions 4.0.0 to 4.12.0, with no PoC, exploit code, or patch mentioned.
00000100
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds215d
Disclosure
CVE-2026-29193 Authentication Bypass in ZITADEL Identity Management Plat... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29193 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
Short announcement of CVE‑2026‑29193 (Authentication Bypass in ZITADEL IdM) with links for more details, but no PoC, exploit, or patch information is provided.
0000035
4.0K followersView on X
The Hacker Wire@TheHackerWire215d
General
🟠 CVE-2026-29193 - High ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and... https://www.thehackerwire.com/vulnerability/CVE-2026-29193/ https://t.co/vcGKLmCB3s
Post summary
The post announces the high‑severity CVE-2026-29193 affecting ZITADEL's login UI, noting that it permits bypassing login and security policies, but does not provide a PoC, exploit, or patch information.
0000032
128 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	zitadel	zitadel	-	-	-

Explore more

Back to dashboard zitadel CVEs zitadel vulnerabilities

What researchers are saying

CVE-2026-29193

CRAC Learning - Tech@cracbotGeneral

CVE‑2026‑29193 has been identified with a CVSS score of 8.2 (HIGH) impacting Zitadel versions 4.0.0‑4.12.0, but no PoC, exploit, or patch details are provided.

CVE@CVEnewDisclosure

CVE-2026-29193 exposes an authentication bypass in Zitadel’s login V2 UI for versions 4.0.0 to 4.12.0, with no PoC, exploit code, or patch mentioned.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

Short announcement of CVE‑2026‑29193 (Authentication Bypass in ZITADEL IdM) with links for more details, but no PoC, exploit, or patch information is provided.

The Hacker Wire@TheHackerWireGeneral

The post announces the high‑severity CVE-2026-29193 affecting ZITADEL's login UI, noting that it permits bypassing login and security policies, but does not provide a PoC, exploit, or patch information.