CVE-2026-85057 ZITADEL: Actions V1 sandbox escape: host file read via require()
An organization admin can read server files via unrestricted require() in Actions V1, disclosing secrets and enabling privilege escalation to instance admin.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-85057?
CVE-2026-85057 is a high-severity path traversal vulnerability in zitadel, published on 24 Sep 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require() registry without restricting its filesystem source loader. An organization Action author with ORG_OWNER, org.action.write, and org.flow.write permissions can run JavaScript at OIDC, SAML, and login-flow trigger points and load files readable by the ZITADEL server process. This can disclose mounted configuration and secrets, including credentials stored through ZITADEL_FIRSTINSTANCE_LOGINCLIENTPATPATH or ZITADEL_FIRSTINSTANCE_MACHINEKEYPATH, and recovered bootstrap credentials can enable escalation from an organization administrator to an instance administrator. The issue affects Actions V1, and host command execution is not established. This issue is fixed in versions 3.4.13 and 4.16.1.
Weakness: CWE-284
Which versions are affected by CVE-2026-85057?
3 open source packages ship an affected version, including github.com/zitadel/zitadel.
| Package | Affected | Fixed in |
|---|---|---|
github.com/zitadel/zitadel Go | All versions | 1.80.0-v2.20.0.20260717062331-baf6ed501b68 |
github.com/zitadel/zitadel Go | All versions | 1.80.0-v2.20.0.20260717062331-baf6ed501b68 |
github.com/zitadel/zitadel Go | All versions | 1.80.0-v2.20.0.20260717062331-baf6ed501b68 |
How do I fix CVE-2026-85057?
Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260717062331-baf6ed501b68 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-85057 being exploited?
There is no known exploitation of CVE-2026-85057 in the wild and no public exploit code.
Sources
Also known as GHSA-fgmf-7rf8-m6vf, GO-2026-6591.