A vulnerability labeled as critical has been found in Zitadel up to 3.4.7/4.12.1. Affected by this issue is some unknown functionality. Executing a manipulation of the argument path can lead to authentication bypass using alternate channel.
This vulnerability is handled as CVE-2026-32130. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
