Vulnerabilities

TI-2026-38589 CVE-2026-53515 · GHSA-gv74-j8m3-fg5f

Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/sso

LOW 32

Better Auth is an authentication and authorization library for TypeScript.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00426 Published 2026-07-15 Fixed in 1.6.11 CWE-269

TI-2026-38587 CVE-2026-53513 · GHSA-5rr4-8452-hf4v

MEDIUM 42

Better Auth is an authentication and authorization library for TypeScript.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00248 Published 2026-07-15 Fixed in 1.6.11 CWE-20