CVE-2026-109371 | Zitadel up to 4.17.x Login V1 UI Change Username Handler missing authentication

October 12, 2026 Yanac

A vulnerability was found in Zitadel up to 4.17.x. It has been classified as critical. The impacted element is the function Change Username Handler of the component Login V1 UI. The manipulation leads to missing authentication.

This vulnerability is traded as CVE-2026-109371. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More