Cloudanix VulnDB

CVE-2025-67494

Critical · 9.3

CVSS

9.3

EPSS

0.4%

Published

Dec 9, 2025

CISA due date

—

The record

ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/zitadel/zitadel 0 1.80.0-v2.20.0.20251208091519-4c879b47334e
Go github.com/zitadel/zitadel 1.83.4 No fix
Go github.com/zitadel/zitadel 4.0.0-rc.1 4.7.1
Go github.com/zitadel/zitadel/v2 0 1.80.0-v2.20.0.20251208091519-4c879b47334e
go github.com/zitadel/zitadel 1.83.4 No fix
go github.com/zitadel/zitadel 4.0.0-rc.1 4.7.1
openSUSE:Leap 15.6 govulncheck-vulndb 0 0.0.20251230T014957-150000.1.134.1

Related vulnerabilities