CVE-2026-85057 Details

A vulnerability exists in ZITADEL Actions V1, versions 3.0.0 prior to 3.4.13 and 4.0.0 prior to 4.16.1. The issue arises from the Actions V1 sandbox allowing the goja Node-compatible require() function to access the host filesystem without restrictions. This enables an organization Action author with specific permissions to read files accessible by the ZITADEL server process. Such files may include sensitive configuration and secrets, like credentials stored through ZITADEL_FIRSTINSTANCE_LOGINCLIENTPATPATH or ZITADEL_FIRSTINSTANCE_MACHINEKEYPATH. Exploiting this vulnerability could lead to unauthorized access to instance-wide credentials, allowing escalation from an organization administrator to an instance administrator.

Users can upgrade to ZITADEL versions 3.4.13 or 4.16.1, both of which include the necessary fix. If an immediate upgrade is not possible, it's recommended to restrict who can create or update Actions, audit existing Actions for filesystem path requirements, and remove or relocate sensitive credential files from the API process filesystem.