{"id":38100,"date":"2025-05-14T13:49:08","date_gmt":"2025-05-14T13:49:08","guid":{"rendered":""},"modified":"2025-09-03T04:05:57","modified_gmt":"2025-09-03T10:05:57","slug":"cve-2025-46815-zitadel-identity-infrastructure-software-vulnerability","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-46815-zitadel-identity-infrastructure-software-vulnerability\/","title":{"rendered":"CVE-2025-46815: ZITADEL Identity Infrastructure Software Vulnerability<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-46815 is a vulnerability found in the identity infrastructure software ZITADEL. This software is primarily used by developers for managing user sessions using the Session API. The vulnerability allows for exploitation of the software’s idp intents feature that could potentially lead to system<\/a> compromise or data leakage. This vulnerability is particularly significant as it affects any organization or individual that uses versions of ZITADEL prior to 3.0.0, 2.71.9, and 2.70.10, potentially exposing their system<\/a> to unauthorized access.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-46815
\nSeverity: High, CVSS score of 8.0
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: System compromise and potential data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

ZITADEL | Versions prior<\/a> to 3.0.0, 2.71.9, 2.70.10<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit works by taking advantage of ZITADEL’s idp intents feature. Upon successful idp intent, the client receives an id and token on a predefined URI. These id and token are then used to authenticate the user or their session<\/a>. In versions prior<\/a> to 3.0.0, 2.71.9, and 2.70.10, an attacker can exploit this feature by repeatedly using intents. With access to the application\u2019s URI, the attacker can retrieve the id and token<\/a>, and authenticate on behalf of the user.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

This is a conceptual example of how the vulnerability might be exploited:<\/p>\n

GET \/intent\/idp HTTP\/1.1\nHost: target.example.com\n{\n\"id\": \"repeatedly-generated-id\",\n\"token\": \"repeatedly-generated-token\"\n}<\/code><\/pre>\n
The attacker would repeatedly send this GET request, using repeatedly generated id and token<\/a>, to the URI where the client receives them. Successful exploitation would allow the attacker to authenticate on behalf of the user, potentially compromising the system and leading<\/a> to data leakage.<\/p>\n
Recommended Mitigations<\/strong><\/p>\n
The best mitigation for this vulnerability is to upgrade to ZITADEL versions<\/a> 3.0.0, 2.71.9, or 2.70.10, which contain a fix for the issue. If upgrading is not an immediate option, implementing a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can serve as a temporary mitigation. However, these measures may not completely secure the system from exploitation<\/a>. As such, upgrading the software to the secure<\/a> versions is highly recommended.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-46815 is a vulnerability found in the identity infrastructure software ZITADEL. This software is primarily used by developers for managing user sessions using the Session API. The vulnerability allows for exploitation of the software’s idp intents feature that could potentially lead to system compromise or data leakage. This vulnerability is particularly significant as […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-38100","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t