# ZITADEL v4.15.3

- Product: ZITADEL (https://whatsnew.fyi/product/zitadel)
- Vendor: ZITADEL
- Date: 2026-06-22
- Version: v4.15.3
- Original notes: https://github.com/zitadel/zitadel/releases/tag/v4.15.3
- Permalink: https://whatsnew.fyi/product/zitadel/releases/v4.15.3

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Add client and scope validation for token exchange
- **fixed** — Ensure external user's email is verified before auto-linking
- **fixed** — Center text for generic IDP buttons without icons in login
- **fixed** — Guard defaultRedirectUri in OIDC/SAML FailedPrecondition paths

##### [4.15.3](https://github.com/zitadel/zitadel/compare/v4.15.2...v4.15.3) (2026-06-22)


###### Bug Fixes

* added client and scope validation for token exchange ([e2886a6](https://github.com/zitadel/zitadel/commit/e2886a61670ca8fd41c9434f87036546e5620bcc))
* ensure external user's email is verified before auto-linking ([c97012f](https://github.com/zitadel/zitadel/commit/c97012f0c5dc2fe960ae6e940cbea23229f0557f))
* **login:** center text for generic IDP buttons without icons ([#12211](https://github.com/zitadel/zitadel/issues/12211)) ([aadc664](https://github.com/zitadel/zitadel/commit/aadc664a206ebdf6bfd85145e9c6fcdc165a6cee)), closes [#12182](https://github.com/zitadel/zitadel/issues/12182)
* **login:** guard defaultRedirectUri in OIDC/SAML FailedPrecondition paths ([0382659](https://github.com/zitadel/zitadel/commit/038265925a3b05ac1df8aad461ab071983e9eb85))