ZITADEL v4.17.3 security fixes

{
  "id": "02322d10dbc808fd03b82e1f740c47cdff7559abca2dfeccfc04507b2f96581e",
  "url": "https://github.com/zitadel/zitadel/releases/tag/v4.17.3",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "ZITADEL v4.17.3 security fixes",
    "summary": "ZITADEL v4.17.3 includes security-related fixes for IDP intent token encryption and authorization checks for authentication methods.",
    "evidence": "4.17.3 (2026-09-04) Bug Fixes crypto: use authenticated encryption for IDP intent tokens (41b1114) login: authorize IDP linking via enrollment guard, not isSessionValid (a53fbc4) login: translate authentication and OTP strings (#12668) (739e91e), closes #12481 #12226 security: check auth method permission on the user's organization (20f0984)",
    "products": [
      {
        "name": {
          "value": "zitadel",
          "evidence": "Release notes from zitadel"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v4.17.3",
            "evidence": "v4.17.3"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-zitadel-zitadel",
  "document_id": 22967,
  "published_at": "2026-09-04T06:44:05+00:00"
}