CVE-2025-67717— Zitadel Discloses the Total Number of Instance Users
Quick assessment
Affected
zitadel zitadel
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ZITADEL是瑞士ZITADEL开源的一个 Auth0、Firebase Auth、AWS Cognito 以及为容器和无服务器时代构建的 Keycloak 的现代开源替代方案。 ZITADEL 2.44.0版本至3.4.4版本和4.0.0-rc.1版本至4.7.1版本存在安全漏洞，该漏洞源于向认证用户披露实例用户总数，可能导致信息泄露。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-67717
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zitadel Discloses the Total Number of Instance Users
Source: CVE Program / CVE List V5
Vulnerability Description
ZITADEL is an open-source identity infrastructure tool. Versions 2.44.0 through 3.4.4 and 4.0.0-rc.1 through 4.7.1 disclose the total number of instance users to authenticated users, regardless of their specific permissions. While this does not leak individual user data or PII, disclosing the total user count via the totalResult field constitutes an information disclosure vulnerability that may be sensitive in certain contexts. This issue is fixed in versions 3.4.5 and 4.7.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
将系统数据暴露到未授权控制的范围
Source: CVE Program / CVE List V5
Vulnerability Title
ZITADEL 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZITADEL是瑞士ZITADEL开源的一个 Auth0、Firebase Auth、AWS Cognito 以及为容器和无服务器时代构建的 Keycloak 的现代开源替代方案。 ZITADEL 2.44.0版本至3.4.4版本和4.0.0-rc.1版本至4.7.1版本存在安全漏洞，该漏洞源于向认证用户披露实例用户总数，可能导致信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-67717
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-67717
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-67717 (1)
Vendor Advisories for CVE-2025-67717 (1)
-
https://github.com/zitadel/zitadel/security/advisories/GHSA-f4cf-9rvr-2rcx x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: zitadel
-
CVE-2026-105214
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Veri -
CVE-2026-105215
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged Exter -
CVE-2026-105213
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for -
CVE-2026-105212
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passke -
CVE-2026-105211
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP
Same vendor: zitadel
-
CVE-2026-105214
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Veri -
CVE-2026-105215
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged Exter -
CVE-2026-105213
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for -
CVE-2026-105212
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passke -
CVE-2026-105211
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP
Same weakness: CWE-497
-
CVE-2026-62036
WordPress All Bootstrap Blocks plugin <= 1.3.31 - Sensitive -
CVE-2026-102387
WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data -
CVE-2026-105073
WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Dat -
CVE-2026-104401
WordPress Memberful - Membership Plugin plugin <= 1.81.2 - S -
CVE-2026-97181
ezGlobal｜GPM LIGHT - Sensitive Data Exposure
V. Comments for CVE-2025-67717
No comments yet