A vulnerability, which was classified as problematic, was found in Zitadel up to 4.11.x. This impacts an unknown function of the component Login V2 Interface. Executing a manipulation can lead to cross site scripting.
This vulnerability is handled as CVE-2026-29192. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
