High · published December 10, 2025
⚡ Picture this: an open-source identity tool with a sneaky logout endpoint that could let attackers run malicious JavaScript on unsuspecting users’ browsers! 😱 This vulnerability is like a poorly-guarded exit sign at a movie theater that misdirects patrons to an unauthorized area – while they think they’re just leaving, an attacker could manipulate the situation to their advantage. An attacker could exploit this flaw to execute harmful scripts in the context of a user’s session, potentially leading to data theft or account takeovers. If multiple user sessions are active in the same browser, the risks are elevated, but fear not! Multi-Factor Authentication (MFA) adds an extra layer of defense to keep your accounts safe.
This vulnerability is like a poorly-guarded exit sign at a movie theater that misdirects patrons to an unauthorized area – while they think they’re just leaving, an attacker could manipulate the situation to their advantage. This vulnerability stems from the Zitadel V2 logout endpoint, which insecurely routes based on user-supplied parameters. An attacker can inject malicious code if the redirect value is not properly validated.
An attacker could exploit this flaw to execute harmful scripts in the context of a user’s session, potentially leading to data theft or account takeovers. If multiple user sessions are active in the same browser, the risks are elevated, but fear not! Multi-Factor Authentication (MFA) adds an extra layer of defense to keep your accounts safe. Upgrade to version 4.7.1 immediately to patch this vulnerability. Additionally, consider enforcing strong authentication measures like MFA or passwordless logins to bolster security. You've got this! With some quick updates, you can protect your users and keep everything running smoothly. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| zitadel/zitadel | ≥ 4.0.0, < 4.7.1 | 4.7.1 |