{"uuid": "0d942535-12f4-4be5-a1e8-0b85d957232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx43fqbjrh2j", "content": "ZITADEL versions 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 hit by CRITICAL vuln (CVE-2026-105207) \u2014 attackers can hijack accounts via IdP link. Patch status unclear: monitor advisories. \ud83d\udea8 https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-exte...", "creation_timestamp": "2026-10-05T04:30:29.516510Z"}