CVE-2026-56668 | ZITADEL up to 4.15.2 Token Exchange Endpoint permission

July 10, 2026 Yanac

A vulnerability was found in ZITADEL up to 4.15.2 and classified as critical. The affected element is an unknown function of the component Token Exchange Endpoint. Such manipulation leads to permission issues.

This vulnerability is referenced as CVE-2026-56668. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More