Security Advisory

CVE-2026-55670

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-10 17:15:44

Last updated 2026-07-10 20:58:36

Assigner GitHub_M

CVSS score 2.3

State PUBLISHED

Description

ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original organization and exposed to that organization's administrator. This issue is fixed in version 4.15.2.

← Browse all CVEs View on cve.org ↗