CyberRota Analysis
AI-GeneratedZITADEL versions 3.x prior to 3.4.14 and 4.x prior to 4.16.2 are vulnerable to an authentication bypass that allows unauthenticated attackers to register an attacker-controlled authenticator using only a victim's login name. This flaw enables attackers to log in as the victim, circumventing existing password protections and multi-factor authentication. Organizations using these ZITADEL versions should prioritize immediate updates to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim's login name can register an attacker-controlled authenticator and log in as that user, bypassing existing passwords and MFA.