github.com/zitadel/zitadel

HighGoCVE-2026-85057September 24, 2026

What to do

Update github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260717062331-baf6ed501b68 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260717062331-baf6ed501b68

A security flaw affects the Go package github.com/zitadel/zitadel. Affected versions: < 1.80.0-v2.20.0.20260717062331-baf6ed501b68. Fixed from version 1.80.0-v2.20.0.20260717062331-baf6ed501b68. CVSS score 8.7.

What the flaw allows: See the advisory for the impact details.

Package: github.com/zitadel/zitadel
Ecosystem: Go modules
Class: Other
Affected versions: < 1.80.0-v2.20.0.20260717062331-baf6ed501b68
CVSS: 8.7
Published on: September 24, 2026

Sources

GitHub Security Advisory — GHSA-fgmf-7rf8-m6vfGitHub Security Advisories
NVD — CVE-2026-85057NVD

Entry built automatically from the cited security advisory, with no model rewriting. Acknowledged by the organisation or vendor, notified to an authority, or established by two independent sources.