v3.4.14

gtsteffaniak/filebrowserv3.4.14Jul 29, 2026by github-actions[bot]

AI Summary

A bug fix release for Zitadel focusing on security improvements for login flows to prevent account pre-hijacking.

Key Highlights

Prevented external-IDP account pre-hijack in Login V1.
Required authentication before WebAuthn/U2F and TOTP/OTP enrollment.

Full Release Notes

## [3.4.14](https://github.com/zitadel/zitadel/compare/v3.4.13...v3.4.14) (2026-07-29)


### Bug Fixes

* **login:** prevent external-IDP account pre-hijack in Login V1 ([da67750](https://github.com/zitadel/zitadel/commit/da677502e1d96c167dd9c630ef1295997b22c700))
* **login:** require authentication before WebAuthn/U2F and TOTP/OTP enrollment ([dd975b8](https://github.com/zitadel/zitadel/commit/dd975b8fc5bb20236b8ad535ebf4567d4e10f2f8))