Zitadel OAuth2 Token Exchange Client Verification Bypass (RFC 8693)

github.com 2026-07-11查看中文 →

Security AdvisoryHighZitadel

Affected:

Zitadel < 2023-06-09 (pre-fix commit e2886a6)

Fixed in:

Zitadel >= e2886a6

Referenced CVEs: CVE-2026-56668 · 8.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Class and Exam Timetabling System V1.0 Pre-Auth SQL Injection Vulnerability with POC 2026-07-19 SQL Injection in Class and Exam Timetabling System V1.0 /edit_schoolyr.php with PoC 2026-07-19 Reflected XSS Vulnerability in Courier Management System V1.0 2026-07-19 Snap7 TSnap7MicroClient Heap Overflow in opWriteArea() via unbounded PDULength 2026-07-19 MoviePilot File Upload/Auth Bypass/Data Leak Vulnerabilities (CVE-Not Listed) 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive