CVE-2026-58165 | openziti up to 2.0.0 enrollment_manager.go ApplyCreate authorization (Issue 4010)

June 30, 2026 Yanac

A vulnerability marked as critical has been reported in openziti ziti up to 2.0.0. This impacts the function ApplyCreate of the file controller/model/enrollment_manager.go. Performing a manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2026-58165. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More