Vulnerabilities
Better Auth flaw allows unauthenticated login via OAuth state reuse
A critical authentication bypass in Better Auth versions prior to 1.7.7 lets attackers hijack sessions by misusing OAuth state values as magic link tokens.
Better Auth
Everything Threat Times has reported about Better Auth: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical-Severity Improper Authentication Flaw in better-auth Tracked as CVE-2026-110864
A newly published critical vulnerability in better-auth carries a CVSS score of 9.1. Here is what is affected and how to respond.