CVE-2026-67328
@better-auth/sso before 1.6.21 Account Takeover via SSO
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflected XSS on logout endpoints to gain unauthorized session access and account takeover.
| CWE | CWE-79 |
| Vendor | better-auth |
| Product | sso |
| Published | Aug 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for better-auth sso
Be the first to know when new high vulnerabilities affecting better-auth sso are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
better-auth / sso
0 < 1.6.21
better-auth / sso
1.7.0-beta.0 < 1.7.0-beta.10