CVE-2026-109374 | Zitadel up to 4.19.1 Token Exchange admin.impersonation check privileges management

October 12, 2026 Yanac

A vulnerability has been found in Zitadel up to 4.19.1 and classified as critical. This affects the function admin.impersonation check of the component Token Exchange. The manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-109374. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More