v3.4.14

OpenBB-finance/OpenBBv3.4.14Jul 29, 2026by github-actions[bot]

AI Summary

This release focuses on security enhancements within the authentication flow. It addresses vulnerabilities related to account pre-hijacking by external identity providers and ensures users are authenticated before enrolling security keys or authenticator apps.

Key Highlights

Prevents external-IDP account pre-hijack in Login V1
Requires authentication before WebAuthn/U2F and TOTP/OTP enrollment
Improves login security by enforcing pre-authentication steps

Full Release Notes

## [3.4.14](https://github.com/zitadel/zitadel/compare/v3.4.13...v3.4.14) (2026-07-29)


### Bug Fixes

* **login:** prevent external-IDP account pre-hijack in Login V1 ([da67750](https://github.com/zitadel/zitadel/commit/da677502e1d96c167dd9c630ef1295997b22c700))
* **login:** require authentication before WebAuthn/U2F and TOTP/OTP enrollment ([dd975b8](https://github.com/zitadel/zitadel/commit/dd975b8fc5bb20236b8ad535ebf4567d4e10f2f8))