A vulnerability classified as problematic has been found in Zitadel up to 4.11.x. This impacts an unknown function of the file /saml-post of the component Login V2 Interface. Performing a manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-29191. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
