CVE-2026-67332Published
@better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-67332 · Microsoft / collected KEV context
cve-program · CVE-2026-67332
- https://github.com/better-auth/better-auth/security/advisories/GHSA-p2fr-6hmx-4528
- https://www.vulncheck.com/advisories/better-auth-oauth-provider-before-beta-4-authorization-bypass
nvd · CVE-2026-67332
- https://github.com/better-auth/better-auth/security/advisories/GHSA-p2fr-6hmx-4528
- https://www.vulncheck.com/advisories/better-auth-oauth-provider-before-beta-4-authorization-bypass
osv · GHSA-p2fr-6hmx-4528
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.