The vulnerability of the ZITADEL identification data management software platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality and integrity of the protected information.

🗓️ 09 Jan 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The ZITADEL authentication weakness exposes the confidentiality and integrity of protected data.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2025-64717	13 Nov 202515:54	–	circl
CNNVD	ZITADEL 授权问题漏洞	13 Nov 202500:00	–	cnnvd
CVE	CVE-2025-64717	13 Nov 202515:30	–	cve
Cvelist	CVE-2025-64717 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP	13 Nov 202515:30	–	cvelist
EUVD	EUVD-2025-175316	14 Nov 202521:11	–	euvd
Github Security Blog	ZITADEL is vulnerable to Account Takeover with deactivated Instance IdP	14 Nov 202521:11	–	github
NVD	CVE-2025-64717	13 Nov 202516:15	–	nvd
OSV	CVE-2025-64717 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP	13 Nov 202515:30	–	osv
OSV	GHSA-J4G7-V4M4-77PX ZITADEL is vulnerable to Account Takeover with deactivated Instance IdP	14 Nov 202521:11	–	osv
OSV	GO-2025-4124 ZITADEL is vulnerable to Account Takeover with deactivated Instance IdP in github.com/zitadel/zitadel	17 Nov 202519:11	–	osv

Source	Link
github	www.github.com/zitadel/zitadel/releases/tag/v2.71.19
github	www.github.com/zitadel/zitadel/releases/tag/v3.4.4
github	www.github.com/zitadel/zitadel/releases/tag/v4.6.6
github	www.github.com/zitadel/zitadel/security/advisories/GHSA-j4g7-v4m4-77px
web	www.web.nvd.nist.gov/view/vuln/detail

09 Jan 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 36.5

CVSS 28.5

EPSS0.00422

ZITADEL platform authentication weakness data confidentiality data integrity