CVE-2025-53895

ZITADEL is an open source identity management system. Starting in version 2.53.0 and prior to versions 4.0.0-rc.2, 3.3.2, 2.71.13, and 2.70.14, vulnerability in ZITADEL's session management API allows any authenticated user to update a session if they know its ID, due to a missing permission check. This flaw enables session hijacking, allowing an attacker to impersonate another user and access sensitive resources. Versions prior to `2.53.0` are not affected, as they required the session token for updates. Versions 4.0.0-rc.2, 3.3.2, 2.71.13, and 2.70.14 fix the issue.

• CWE-384
• CWE-863

• https://github.com/zitadel/zitadel/releases/tag/v2.70.14Release Notes
• https://github.com/zitadel/zitadel/releases/tag/v2.71.13Release Notes
• https://github.com/zitadel/zitadel/releases/tag/v3.3.2Release Notes
• https://github.com/zitadel/zitadel/releases/tag/v4.0.0-rc.2Release Notes
• https://github.com/zitadel/zitadel/security/advisories/GHSA-6c5p-6www-pcmrVendor Advisory

Published

Jul 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53889Directus is a real-time API and App dashboard for managing S…6.5
• CVE-2025-5389A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-53890pyload is an open-source Download Manager written in pure Py…9.8
• CVE-2025-53891The timelineofficial/Time-Line- repository contains the sour…4.3
• CVE-2025-53892Vue I18n is the internationalization plugin for Vue.js. The …5.3
• CVE-2025-53893File Browser provides a file managing interface within a spe…6.5
• CVE-2025-53896Kiteworks MFT orchestrates end-to-end file transfer workflow…8.1
• CVE-2025-53897Kiteworks MFT orchestrates end-to-end file transfer workflow…6.8
• CVE-2025-53899Kiteworks MFT orchestrates end-to-end file transfer workflow…7.2
• CVE-2025-5390A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-53900Kiteworks MFT orchestrates end-to-end file transfer workflow…8.8
• CVE-2025-53901Wasmtime is a runtime for WebAssembly. Prior to versions 24.…3.5