
With today’s ever-evolving technological landscape and reliance on digital identity management systems, the discovery of a critical vulnerability in ZITADEL’s administration interface presents a significant cause for concern. Known as CVE-2025-27507, this vulnerability stems from insufficient authorization checks and poses severe risks including account takeovers and configuration tampering. The vulnerability chain has garnered a critical CVSS v3.1 score of 9.0,










