Back to CVE List

CVE-2026-55672

HIGH SEVERITY

CVSS Score & Metrics

Base Score
7.4 / 10

Vulnerability Description

ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)

Vulnerability Details

Published Date
Last Modified
Source
GitHub
Vendor
go
Product
github.com/zitadel/zitadel

External References

Discussion (0)

Add Comment

No comments yet. Be the first!