CVE-2026-85057: ZITADEL: Actions V1 sandbox escape: host file read via require()
A vulnerability in ZITADEL Actions V1 allows an organization Action author to read files from the ZITADEL host filesystem through the JavaScript require() module loader. On common self-hosted deployments this can be chained to steal bootstrap credentials (including the Login Client PAT) and escalate from a single-tenant organization owner to instance administrator.
References
- github.com/advisories/GHSA-fgmf-7rf8-m6vf
- github.com/zitadel/zitadel/commit/afe108640cf57a17e8b743fbcdad9ae636eb3eb7
- github.com/zitadel/zitadel/commit/baf6ed501b684f47048553d9034e8d3aa824950e
- github.com/zitadel/zitadel/commit/e28d6bcc033368c3e9683ee15c195b8460b9305d
- github.com/zitadel/zitadel/releases/tag/v3.4.13
- github.com/zitadel/zitadel/releases/tag/v4.16.1
- github.com/zitadel/zitadel/security/advisories/GHSA-fgmf-7rf8-m6vf
- nvd.nist.gov/vuln/detail/CVE-2026-85057
Code Behaviors & Features
Detect and mitigate CVE-2026-85057 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →