Zitadel Bypass Second Authentication Factor

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-64103 · Microsoft / collected KEV context

EUVD-2025-36696

GHSA-cfjq-28r2-4jv5

GO-2025-4083

cve-program · CVE-2025-64103

• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b

euvd · EUVD-2025-36696

• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b

nvd · CVE-2025-64103

• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b
• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5

osv · GHSA-cfjq-28r2-4jv5

• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://nvd.nist.gov/vuln/detail/CVE-2025-64103
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b
• https://github.com/zitadel/zitadel
• https://pkg.go.dev/vuln/GO-2025-4083

osv · GO-2025-4083

• https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
• https://nvd.nist.gov/vuln/detail/CVE-2025-64103
• https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b

No related operational record is retained in the current change model.