{"uuid": "87cc6bff-6a40-4c58-b04b-a9448ad4ba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386420278966659", "content": "CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account \u2014 full takeover possible. Patch status unknown. Details: https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-external-identity-cb61bb81cf2dabad #OffSeq #ZITADEL #Vuln #AccountSecurity", "creation_timestamp": "2026-10-05T04:30:26.572949Z"}