ZITADEL External JWT IdP Token Expiry Validation Bypass (CVE-2025-56664)

github.com 2026-07-11查看中文 →

Security AdvisoryCVE-2025-56664HighZITADEL

Affected:

ZITADEL 4.x (4.0.0 to 4.15.1)
ZITADEL 3.x (3.0.6 to 3.4.11)

Fixed in:

4.15.2
3.4.12

Referenced CVEs: CVE-2026-56664 · 4.2

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Command Injection in @umijs/utils via git helper functions 2026-07-22 UmiJS @umijs/utils Shell Injection Vulnerability Fix 2026-07-22 Shell Injection Vulnerability Fix in Git File Utility Functions 2026-07-22 itsourcecode Hospital Management System V1.0 SQL Injection (Time-based Blind) with POC 2026-07-22 jsforce CLI Command Injection (RCE) Vulnerability and Fix 2026-07-22

Offline Archive

Offline screenshot & PDF are Pro-exclusive