Back to all versions
4.7.6
2025-12-17 patch
ZITADEL v4.7.6 is a critical security release addressing React Server Components vulnerabilities and a session handling bug in Login V1. Immediate upgrade is strongly recommended for all deployments. This release contains no breaking changes and requires no migration steps.
Security 1
Bug Fixes 2
- Login V1 password verification handling (#11202) mediumCorrected handling to only update existing sessions instead of creating new session entries on failed password attempts. This prevents session table bloat and improves database efficiency.authentication login
Contributors 3
Upgrade Warnings
- • Critical security vulnerabilities are addressed in this release. Upgrade immediately to prevent potential denial of service attacks and source code exposure.