CVE-2026-29193 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: March 7, 2026
ZITADEL - Authentication Bypass
Published: March 7, 2026Updated: March 7, 2026Remote Exploitable
Overview
ZITADEL 4.0.0 to 4.12.0 contains an authentication bypass caused by flawed login V2 UI logic, letting users bypass login policies and self-register or sign in with password despite disabled options, exploit requires user interaction.
Severity & Score
Severity: High
CVSS Score: 8.2
Impact
Attackers can bypass login restrictions to self-register or sign in, potentially compromising account security and organizational policies.
Mitigation
Upgrade to version 4.12.1 or later.
Related Resources
Details
- CVE ID
- CVE-2026-29193
- Severity
- High
- CVSS Score
- 8.2
- Type
- broken_authentication
- Status
- new
CWE
- CWE-287
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N