PT-2026-114178

CVE-2026-110864

Published

2026-10-14

Updated

2026-10-27

Description by

CVSS 4.0

9.1

Critical

MetricsAV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Better Auth versions 1.5.0-beta.12 through 1.7.6

Description An authentication bypass exists in the OAuth Proxy plugin. Unauthenticated attackers can sign in as other users by forging encrypted profiles. This occurs when the proxy shares the global secret and cookie-stored state is utilized, allowing attackers to obtain an encrypted state for a fake profile containing a victim's verified email to achieve account takeover via implicit linking.

Recommendations Update Better Auth to version 1.7.7 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Iabdullah215

Martinfrancois

Vendors

Affected products

Weakness enumeration

CWE-287: Improper Authentication