EUVD-2026-86322
GHSA-fgmf-7rf8-m6vf
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Network-reachable management API, but requires ORG_OWNER plus action/flow write (PR:H); secret disclosure crossing org→instance boundary yields S:C, C:H and I:H (priv-esc), no availability impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require() registry without restricting its filesystem source loader. An organization Action author with ORG_OWNER, org.action.write, and org.flow.write permissions can run JavaScript at OIDC, SAML, and login-flow trigger points and load files readable by the ZITADEL server process. This can disclose mounted configuration and secrets, including credentials stored through ZITADEL_FIRSTINSTANCE_LOGINCLIENTPATPATH or ZITADEL_FIRSTINSTANCE_MACHINEKEYPATH, and recovered bootstrap credentials can enable escalation from an organization administrator to an instance administrator. The issue affects Actions V1, and host command execution is not established. This issue is fixed in versions 3.4.13 and 4.16.1.
AnalysisAI
ZITADEL Actions V1 on affected releases (3.0.0 through pre-3.4.13 and the 4.x line before 4.16.1) fails to restrict the goja Node-compatible require() registry, so an authenticated organization Action author holding ORG_OWNER, org.action.write, and org.flow.write can execute JavaScript at OIDC, SAML, or login-flow triggers and load arbitrary files readable by the ZITADEL server process. This exposes mounted configuration and secrets - notably credentials referenced by ZITADEL_FIRSTINSTANCE_LOGINCLIENTPATPATH and ZITADEL_FIRSTINSTANCE_MACHINEKEYPATH - and recovered bootstrap credentials can let an organization administrator escalate to instance administrator; host command execution is not established. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires ZITADEL Actions V1 (the affected feature) to be in use on versions 3.0.0 through pre-3.4.13 or the 4.x line before 4.16.1, and an attacker who holds an organization Action author role with ORG_OWNER plus org.action.write and org.flow.write permissions. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N, base 8.7) is internally consistent with the description: exploitation is network-reachable via the management API but requires HIGH privileges - specifically an organization Action author holding ORG_OWNER plus org.action.write and org.flow.write. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to ZITADEL 3.4.13 or 4.16.1 (see https://github.com/zitadel/zitadel/releases/tag/v3.4.13 and https://github.com/zitadel/zitadel/releases/tag/v4.16.1 and advisory GHSA-fgmf-7rf8-m6vf); the fix replaces the unfiltered goja require registry with a loader that rejects all file-based modules while preserving built-in modules such as zitadel/http. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Vendor-released patch: 3.4.13 and 4.16.1. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Zitadel is open-source identity infrastructure software. Rated critical severity (CVSS 9.1), this vulnerability is remot
ZITADEL is an identity infrastructure system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable
Account takeover in ZITADEL affects instances running 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3: an unauthenticated r
Cross-organization account takeover in ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 allows an authenticated attacker
Stored XSS in ZITADEL identity management platform versions 4.0.0 to 4.11.1 allows unauthenticated attackers to inject p
Account pre-hijacking in ZITADEL lets an unauthenticated remote attacker create a user record already bound to a victim'
Remote account takeover in ZITADEL versions before 4.17.1 allows unauthenticated attackers to compromise MFA-protected a
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Ra
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Ra
ZITADEL 4.x before 4.17.1 fails to check an organization's inactive state during Login V2 authentication, allowing users
Unauthenticated remote attackers who know a valid user's login name can enroll attacker-controlled multi-factor authenti
ZITADEL combines the ease of Auth0 and the versatility of Keycloak.**Actions**, introduced in ZITADEL **1.42.0** on the
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today